0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xffffffff, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1516.563293] loop7: detected capacity change from 0 to 6 [ 1516.588825] FAT-fs (loop7): Directory bread(block 6) failed 17:13:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x1267, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1516.595657] FAT-fs (loop7): Directory bread(block 7) failed [ 1516.608694] FAT-fs (loop7): Directory bread(block 8) failed [ 1516.613196] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1516.614421] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1516.616926] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1516.618131] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1516.621069] FAT-fs (loop7): Directory bread(block 9) failed 17:13:49 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1516.640596] FAT-fs (loop7): Directory bread(block 6) failed [ 1516.641952] FAT-fs (loop7): Directory bread(block 7) failed [ 1516.651252] FAT-fs (loop7): Directory bread(block 8) failed 17:13:49 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) [ 1516.653181] FAT-fs (loop7): Directory bread(block 9) failed 17:13:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0xffffffff, 0x0, 0x0}) 17:13:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x1274, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:13:49 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1516.697336] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1516.698030] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1516.723054] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1516.723748] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:13:49 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0xfd, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12832}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x0) 17:13:49 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c", 0x43, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) [ 1517.456383] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 1517.457662] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 1518.578949] Bluetooth: hci3: command 0x0406 tx timeout [ 1520.626985] Bluetooth: hci3: command 0x0406 tx timeout 17:13:59 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:13:59 executing program 4: sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1402a8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88a0}, 0x4008000) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 17:13:59 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x9f, 0xd, 0x2, 0x5, 0x0, 0x8f8a, 0x200, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x1000}, 0x6982, 0x100000001, 0x2, 0x1, 0x7, 0x7ff, 0x3, 0x0, 0x1, 0x0, 0x4}, r1, 0x2, r0, 0x0) futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x0) 17:13:59 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46", 0x41, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:13:59 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c", 0x43, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:13:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x1275, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:13:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:13:59 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x2, 0x0, 0x0, 0x0}) [ 1526.717210] loop7: detected capacity change from 0 to 6 [ 1526.724724] FAT-fs (loop7): Directory bread(block 6) failed [ 1526.725235] FAT-fs (loop7): Directory bread(block 7) failed [ 1526.725891] FAT-fs (loop7): Directory bread(block 8) failed [ 1526.728158] FAT-fs (loop7): Directory bread(block 9) failed [ 1526.732949] FAT-fs (loop7): Directory bread(block 6) failed [ 1526.733427] FAT-fs (loop7): Directory bread(block 7) failed [ 1526.737888] FAT-fs (loop7): Directory bread(block 8) failed [ 1526.738355] FAT-fs (loop7): Directory bread(block 9) failed 17:13:59 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5412, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040), 0x5, 0x2000, 0x0, &(0x7f0000000100), 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x6) [ 1526.777281] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1526.777938] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1526.782259] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1526.782904] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1526.794003] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1526.795278] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:13:59 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c", 0x43, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) [ 1526.824191] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1526.825477] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:13:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x2, 0x0}) 17:13:59 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_settime(0x3, &(0x7f00000000c0)={r0, r1+10000000}) 17:13:59 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1526.899897] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1526.900566] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1526.902939] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1526.903561] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:14:08 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_settime(0x3, &(0x7f00000000c0)={r0, r1+10000000}) 17:14:08 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45", 0x44, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:14:08 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, r3) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000040)=0x1, 0x1) 17:14:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x1276, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:14:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) (fail_nth: 1) 17:14:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x6, 0x0}) 17:14:08 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x6, 0x0, 0x0, 0x0}) 17:14:08 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1535.601282] loop7: detected capacity change from 0 to 6 [ 1535.602875] FAULT_INJECTION: forcing a failure. [ 1535.602875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1535.603923] CPU: 0 UID: 0 PID: 10762 Comm: syz-executor.1 Not tainted 6.18.0-rc1-next-20251015 #1 PREEMPT(voluntary) [ 1535.603941] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1535.603949] Call Trace: [ 1535.603953] [ 1535.603957] dump_stack_lvl+0xfa/0x120 [ 1535.603983] should_fail_ex+0x4d7/0x5e0 [ 1535.604001] _copy_from_user+0x30/0xd0 [ 1535.604018] move_addr_to_kernel.part.0+0x40/0x120 [ 1535.604041] __sys_bind+0x14b/0x2b0 [ 1535.604054] ? __pfx___sys_bind+0x10/0x10 [ 1535.604070] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1535.604084] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1535.604098] ? ksys_write+0x1a3/0x240 [ 1535.604116] ? __pfx_ksys_write+0x10/0x10 [ 1535.604135] __x64_sys_bind+0x73/0xb0 [ 1535.604148] do_syscall_64+0xbf/0x390 [ 1535.604166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.604179] RIP: 0033:0x7ff1e4d49b19 [ 1535.604188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1535.604200] RSP: 002b:00007ff1e22bf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1535.604212] RAX: ffffffffffffffda RBX: 00007ff1e4e5cf60 RCX: 00007ff1e4d49b19 [ 1535.604221] RDX: 0000000000000003 RSI: 0000000020000000 RDI: 0000000000000004 [ 1535.604228] RBP: 00007ff1e22bf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1535.604235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1535.604242] R13: 00007ffd81cd9f9f R14: 00007ff1e22bf300 R15: 0000000000022000 [ 1535.604258] [ 1535.630109] FAT-fs (loop7): Directory bread(block 6) failed [ 1535.630678] FAT-fs (loop7): Directory bread(block 7) failed [ 1535.632324] FAT-fs (loop7): Directory bread(block 8) failed [ 1535.634737] FAT-fs (loop7): Directory bread(block 9) failed [ 1535.638963] FAT-fs (loop7): Directory bread(block 6) failed [ 1535.639528] FAT-fs (loop7): Directory bread(block 7) failed [ 1535.643844] FAT-fs (loop7): Directory bread(block 8) failed [ 1535.644386] FAT-fs (loop7): Directory bread(block 9) failed [ 1535.651847] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1535.652569] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:14:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) (fail_nth: 2) [ 1535.672079] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1535.673358] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:14:08 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45", 0x44, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) [ 1535.702066] FAULT_INJECTION: forcing a failure. [ 1535.702066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1535.703264] CPU: 0 UID: 0 PID: 10777 Comm: syz-executor.1 Not tainted 6.18.0-rc1-next-20251015 #1 PREEMPT(voluntary) [ 1535.703281] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1535.703289] Call Trace: [ 1535.703293] [ 1535.703298] dump_stack_lvl+0xfa/0x120 [ 1535.703322] should_fail_ex+0x4d7/0x5e0 [ 1535.703341] _copy_to_user+0x32/0xd0 [ 1535.703358] simple_read_from_buffer+0xe0/0x180 [ 1535.703374] proc_fail_nth_read+0x18a/0x240 [ 1535.703393] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1535.703411] ? security_file_permission+0x22/0x90 [ 1535.703430] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1535.703447] vfs_read+0x1eb/0xc70 [ 1535.703467] ? __pfx_vfs_read+0x10/0x10 [ 1535.703484] ? lock_release+0xc8/0x290 [ 1535.703501] ? __fget_files+0x20d/0x3b0 [ 1535.703523] ksys_read+0x121/0x240 [ 1535.703538] ? __pfx_ksys_read+0x10/0x10 [ 1535.703559] do_syscall_64+0xbf/0x390 [ 1535.703577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.703590] RIP: 0033:0x7ff1e4cfc69c [ 1535.703599] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1535.703610] RSP: 002b:00007ff1e22bf170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1535.703623] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007ff1e4cfc69c [ 1535.703631] RDX: 000000000000000f RSI: 00007ff1e22bf1e0 RDI: 0000000000000003 [ 1535.703639] RBP: 00007ff1e22bf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1535.703646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1535.703653] R13: 00007ffd81cd9f9f R14: 00007ff1e22bf300 R15: 0000000000022000 [ 1535.703670] 17:14:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x9, 0x0}) 17:14:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2201, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:14:08 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1535.747994] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1535.749205] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:14:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) [ 1535.765522] loop7: detected capacity change from 0 to 6 17:14:08 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_settime(0x3, &(0x7f00000000c0)={r0, r1+10000000}) [ 1535.775147] FAT-fs (loop7): Directory bread(block 6) failed [ 1535.775646] FAT-fs (loop7): Directory bread(block 7) failed [ 1535.777204] FAT-fs (loop7): Directory bread(block 8) failed [ 1535.777682] FAT-fs (loop7): Directory bread(block 9) failed [ 1535.778973] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1535.780159] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1535.781741] FAT-fs (loop7): Directory bread(block 6) failed [ 1535.784162] FAT-fs (loop7): Directory bread(block 7) failed [ 1535.784632] FAT-fs (loop7): Directory bread(block 8) failed [ 1535.785487] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1535.786145] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1535.795293] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1535.795943] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1535.796790] FAT-fs (loop7): Directory bread(block 9) failed 17:14:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xd, 0x0}) 17:14:08 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45", 0x44, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:14:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xff02}, 0x3) [ 1535.903455] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1535.904136] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1535.905793] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1535.906446] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:14:08 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x9, 0x0, 0x0, 0x0}) 17:14:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2202, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:14:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x600, 0x0}) [ 1535.993164] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1535.993800] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1535.996301] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1535.996935] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1536.009136] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1536.010394] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:14:18 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xd, 0x0, 0x0, 0x0}) 17:14:18 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:14:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xff03}, 0x3) 17:14:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:14:18 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:14:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x900, 0x0}) 17:14:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, r3) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000040)=0x1, 0x1) 17:14:18 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0xfffffffb, 0x4) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x0, 0xfff, "27a5c6", 0xff, 0x9}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1}, 0x6) [ 1545.753705] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1545.754924] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1545.761061] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1545.762258] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1545.773769] FAT-fs (loop7): unable to read boot sector 17:14:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xd00, 0x0}) [ 1545.859557] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1545.860728] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:14:18 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:14:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2205, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1545.909642] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1545.910770] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:14:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xff04}, 0x3) 17:14:18 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4, 0xc1}}, './file0\x00'}) write$bt_hci(r2, &(0x7f0000000040)={0x1, @host_buffer_size={{0xc33, 0x7}, {0x2, 0x1, 0x7, 0x6}}}, 0xb) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x6802, 0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xc) 17:14:18 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1545.953924] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1545.955193] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1545.961065] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1545.962285] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1546.014782] FAT-fs (loop7): unable to read boot sector 17:14:18 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x600, 0x0, 0x0, 0x0}) [ 1546.130117] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1546.131142] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1546.148917] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1546.149922] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:14:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) (fail_nth: 1) 17:14:28 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000040)={0x2, 0x100, 0x101, 0x0, 0x0, 0x6, 0x80000001, 0x1f, 0x80, 0x67, 0x6, 0x9b5c, 0x1, 0x9}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="06000000009097b1338a0b16510000002e2f66696c653000"]) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000100)={{0x1, 0x7}, 0x100, './file0\x00'}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) 17:14:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xff05}, 0x3) 17:14:28 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x900, 0x0, 0x0, 0x0}) 17:14:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xfdfd, 0x0}) 17:14:28 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:14:28 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2270, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:14:28 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1555.453368] FAT-fs (loop7): unable to read boot sector 17:14:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xff06}, 0x3) [ 1555.489909] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1555.490597] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1555.497453] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1555.498877] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1555.500632] FAULT_INJECTION: forcing a failure. [ 1555.500632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1555.501730] CPU: 0 UID: 0 PID: 10872 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251015 #1 PREEMPT(voluntary) [ 1555.501748] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1555.501755] Call Trace: [ 1555.501759] [ 1555.501763] dump_stack_lvl+0xfa/0x120 [ 1555.501787] should_fail_ex+0x4d7/0x5e0 [ 1555.501807] _copy_from_user+0x30/0xd0 [ 1555.501824] move_addr_to_kernel.part.0+0x40/0x120 [ 1555.501852] __sys_bind+0x14b/0x2b0 [ 1555.501865] ? __pfx___sys_bind+0x10/0x10 [ 1555.501882] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1555.501896] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1555.501911] ? ksys_write+0x1a3/0x240 [ 1555.501928] ? __pfx_ksys_write+0x10/0x10 [ 1555.501948] __x64_sys_bind+0x73/0xb0 [ 1555.501961] do_syscall_64+0xbf/0x390 [ 1555.501980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.501993] RIP: 0033:0x7fee3fa47b19 [ 1555.502002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1555.502014] RSP: 002b:00007fee3cfbd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1555.502025] RAX: ffffffffffffffda RBX: 00007fee3fb5af60 RCX: 00007fee3fa47b19 [ 1555.502034] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 [ 1555.502041] RBP: 00007fee3cfbd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1555.502048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1555.502055] R13: 00007ffe54426a5f R14: 00007fee3cfbd300 R15: 0000000000022000 [ 1555.502073] 17:14:28 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) [ 1555.521792] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1555.522528] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1555.563752] loop7: detected capacity change from 0 to 6 [ 1555.578165] FAT-fs (loop7): bogus number of reserved sectors [ 1555.578638] FAT-fs (loop7): Can't find a valid FAT filesystem 17:14:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x1000000, 0x0}) 17:14:28 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xd00, 0x0, 0x0, 0x0}) 17:14:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) (fail_nth: 2) [ 1555.645888] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1555.646542] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1555.648563] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1555.649288] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1555.651741] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1555.652467] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1555.662965] FAULT_INJECTION: forcing a failure. [ 1555.662965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1555.663940] CPU: 0 UID: 0 PID: 10891 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251015 #1 PREEMPT(voluntary) [ 1555.663957] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1555.663965] Call Trace: [ 1555.663969] [ 1555.663974] dump_stack_lvl+0xfa/0x120 [ 1555.664000] should_fail_ex+0x4d7/0x5e0 [ 1555.664018] _copy_to_user+0x32/0xd0 [ 1555.664036] simple_read_from_buffer+0xe0/0x180 [ 1555.664052] proc_fail_nth_read+0x18a/0x240 [ 1555.664071] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1555.664089] ? security_file_permission+0x22/0x90 [ 1555.664108] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1555.664126] vfs_read+0x1eb/0xc70 [ 1555.664145] ? __pfx_vfs_read+0x10/0x10 [ 1555.664162] ? lock_release+0xc8/0x290 [ 1555.664179] ? __fget_files+0x20d/0x3b0 [ 1555.664200] ksys_read+0x121/0x240 [ 1555.664216] ? __pfx_ksys_read+0x10/0x10 [ 1555.664236] do_syscall_64+0xbf/0x390 [ 1555.664255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.664269] RIP: 0033:0x7fee3f9fa69c [ 1555.664278] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1555.664290] RSP: 002b:00007fee3cfbd170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1555.664302] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fee3f9fa69c [ 1555.664310] RDX: 000000000000000f RSI: 00007fee3cfbd1e0 RDI: 0000000000000003 [ 1555.664318] RBP: 00007fee3cfbd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1555.664325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1555.664332] R13: 00007ffe54426a5f R14: 00007fee3cfbd300 R15: 0000000000022000 [ 1555.664348] 17:14:36 executing program 4: prctl$PR_SET_SECUREBITS(0x1c, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECUREBITS(0x1c, 0x32) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r1 = memfd_secret(0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000140)=0x7f, 0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7fff}}, './file0\x00'}) ioctl$sock_bt_hci(r2, 0x400448dc, &(0x7f0000000080)="72aa307fcf71e24f38d9a8e9a05310b9cea3f82eff5d38ad9ceb70041dd3c4b70c0e79fc1cd0a3d48682490c01ce672f903769a14052e668cfd024bcf096b4851929d896ca01ebd7edaaf8144ad518661c26151ac36df3b6cc9a1a556a66e12642ed4179ea7be49b66ea62644c27259b0939da127d219e477d94ccd8bd5b179adb3f9b285c31dc") 17:14:36 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xfdfd, 0x0, 0x0, 0x0}) 17:14:36 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:14:36 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:14:36 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2271, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:14:36 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$SG_IO(r0, 0x2203, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:14:36 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x2000000, 0x0}) 17:14:36 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xff07}, 0x3) 17:14:36 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2272, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:14:37 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) write$bt_hci(r1, &(0x7f0000000000)={0x1, @logical_link_cancel={{0x43b, 0x2}, {0xc8, 0x1}}}, 0x6) write$bt_hci(r0, &(0x7f0000004240)=ANY=[@ANYBLOB="0175aff8ff05432d23f8eb1289"], 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x4}, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0xf, 0x0, 0x4}}) recvmmsg(r2, &(0x7f0000003fc0)=[{{&(0x7f0000000140)=@ax25={{}, [@rose, @null, @default, @default, @null, @default, @bcast, @default]}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/11, 0xb}, {&(0x7f00000001c0)=""/166, 0xa6}, {&(0x7f0000000280)=""/184, 0xb8}], 0x3, &(0x7f0000000380)=""/6, 0x6}, 0x80000001}, {{&(0x7f00000003c0)=@un=@abs, 0x80, &(0x7f0000000640)=[{&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f0000000500)=""/26, 0x1a}, {&(0x7f0000000540)=""/160, 0xa0}, {&(0x7f0000000600)=""/50, 0x32}], 0x4, &(0x7f0000000680)=""/209, 0xd1}, 0xea6e}, {{&(0x7f0000000780)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000800)=""/9, 0x9}, {&(0x7f0000000840)=""/79, 0x4f}, {&(0x7f00000008c0)=""/20, 0x14}], 0x3, &(0x7f0000000940)=""/206, 0xce}, 0x5}, {{&(0x7f0000000a40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000004280)=""/119, 0x77}, {&(0x7f0000000b40)=""/38, 0x26}, {&(0x7f0000000b80)=""/177, 0xb1}, {&(0x7f0000000c40)=""/82, 0x52}, {&(0x7f0000000cc0)=""/196, 0xc4}, {&(0x7f0000000dc0)=""/74, 0x4a}, {&(0x7f0000000e40)=""/216, 0xd8}], 0x7}, 0x7f}, {{&(0x7f0000000fc0)=@phonet, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001040)=""/83, 0x53}, {&(0x7f00000010c0)=""/228, 0xe4}], 0x2, &(0x7f0000001200)=""/42, 0x2a}, 0x1}, {{&(0x7f0000001240)=@nl=@unspec, 0x80, &(0x7f0000002500)=[{&(0x7f00000012c0)=""/97, 0x61}, {&(0x7f0000001340)=""/248, 0xf8}, {&(0x7f0000001440)=""/23, 0x17}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/68, 0x44}], 0x5, &(0x7f0000002580)=""/67, 0x43}, 0x8}, {{&(0x7f0000002600)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000002880)=[{&(0x7f0000002680)=""/190, 0xbe}, {&(0x7f0000002740)=""/13, 0xd}, {&(0x7f0000002780)=""/208, 0xd0}], 0x3}, 0x80}, {{&(0x7f00000028c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000002940)=""/8, 0x8}, {&(0x7f0000002980)=""/149, 0x95}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/206, 0xce}, {&(0x7f0000003b40)=""/183, 0xb7}, {&(0x7f0000003c00)=""/1, 0x1}], 0x6, &(0x7f0000003cc0)=""/158, 0x9e}, 0x9}, {{&(0x7f0000003d80)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003e00)=""/243, 0xf3}], 0x1, &(0x7f0000003f40)=""/106, 0x6a}, 0x7fffffff}], 0x9, 0x10040, &(0x7f0000004200)) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x6802, 0x1) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xa) ioctl$sock_bt_hci(r3, 0x400448e3, &(0x7f0000000100)="0a8ae1a32140e78fddec6b31a5d5b35ab2e1a368144cc4a68618d31b08ae1510883d43e0cf551d9378") [ 1564.293481] loop7: detected capacity change from 0 to 6 [ 1564.298882] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1564.299611] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1564.301819] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1564.302527] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1564.306473] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1564.307174] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1564.318233] FAT-fs (loop7): bogus number of reserved sectors [ 1564.318730] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1564.324109] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1564.324764] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:14:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x6000000, 0x0}) 17:14:37 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$SG_IO(r0, 0x2203, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:14:37 executing program 5: ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000040)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:14:37 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x1000000, 0x0, 0x0, 0x0}) 17:14:37 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) 17:14:37 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:14:37 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) write$bt_hci(r1, &(0x7f0000000040)={0x1, @write_voice_setting={{0xc26, 0x2}, {0x120}}}, 0x6) 17:14:37 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2275, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1564.408096] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1564.408772] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1564.417453] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1564.418135] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1564.455408] loop7: detected capacity change from 0 to 6 [ 1564.466214] FAT-fs (loop7): bogus number of reserved sectors [ 1564.466709] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1564.485497] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1564.486196] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1564.499964] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1564.500615] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:14:45 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x2000000, 0x0, 0x0, 0x0}) 17:14:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2276, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:14:45 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$SG_IO(r0, 0x2203, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:14:45 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e3, &(0x7f0000000040)="0eb7ef9ee2c231acd9792a2a94bd2ddb4655a2c10a8cc7a040abea974c9e9a33918a7df0c352515bf3ac2657f86c8817a493f282021f767b3b72ac76161ed0067869ed7c6fb0e4d2efe0ec79f4d8e9dd122d2f7e35047a7f5786c8a4950f9fe4fb5970a4beabb4ec19afc42ca733369a0d9eea6e16f9c9979fd2305e092b7eff4c885eb31e") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0xf, 0x0, 0x4}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0x3, 0x4}, 0x6) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000200)=@get={0x1, &(0x7f0000000100)=""/199, 0x6}) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x6802, r5) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f00000002c0)=0x2, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:14:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x9000000, 0x0}) 17:14:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x3) 17:14:45 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$sock_bt_hci(r0, 0x400448de, 0xfffffffffffffffc) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 17:14:45 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) [ 1573.149750] loop7: detected capacity change from 0 to 6 [ 1573.163239] FAT-fs (loop7): bogus number of reserved sectors [ 1573.163729] FAT-fs (loop7): Can't find a valid FAT filesystem 17:14:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2279, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1573.196216] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1573.196887] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1573.206983] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1573.207632] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1573.210085] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1573.210715] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1573.236136] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1573.236775] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:14:45 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) dup(r0) ioctl$SG_IO(0xffffffffffffffff, 0x2203, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:14:45 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:14:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x227a, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:14:46 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xd000000, 0x0}) 17:14:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x3) 17:14:46 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400800, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, 0x3, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xa3c}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x3, 0xd3, 0x101, 0x0, 0x9]}, @CTA_NAT_DST={0x3c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x14}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x40000) readahead(r0, 0x2, 0x7fffffff) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) r1 = syz_mount_image$tmpfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x64, 0x7, &(0x7f0000000740)=[{&(0x7f0000000280)="a868b98c834cdda2177e4a265e37be39ebc08cfd18666a7b9a05e8c3f39a5e38bc0436fdf00aa72ee66f875753663a333b67a435970746e2f8e8cb34577ea493c8b592ae83fa8b09b541723bd0288d8555059b369982748e82510f080120af9a2bcc81a5397d72b754c347de08908f2a6eaf33963163d2ce8a12ac6be8fc363bd61c32a42e5fa31b0a72268ad7d9e8b43b904aa3c82ed6811bfa77612cc7fd0a8e53ca8956a9c7f3267df85f6f994221365019544dcb231d1535f9825bf021863269f94275a83b06dcf1501769ae992a591804f3d4baf9e6a521c7", 0xdb, 0x1f}, {&(0x7f0000000380)="a0c1acbafd1db0bb07966533bd22bae179941d7087757acced50a66861a5542e2116e41646dda49629ee832a380bff6c840222bc8df171abd6647a80a8fe89948caedf8243ae3485e3e9f72031f82a7dc02c0b7af1d0c53cfde7e6c7a0efbaf371190c3ef72e745380fbb9228ac6d21a1ec22181187c6bdfff7e", 0x7a, 0x800}, {&(0x7f0000000400)="b24776f8cfe1d2f77d3fadcc67e93d0c966ed0468413ce4ce5d697b9ae0859990b4bc9f1fb7b639084b0e98c0ab2d9adb2fef4042a19f3d42c6ee9d33f96251bfedeea5b01b0be9f859d7a0773f49bf6991e3cf3292243492a822c545ae1f0d108bd8cc4b6d1a6401ca30761fffc08344ff2d94d10864e0e6276b2d237e77fb08ae8ad49950a7471556837431c37b2e134437ec48a9d8ca94c5e038ac93f41dfb1939736e6b7d66405e1", 0xaa, 0x200}, {&(0x7f00000004c0)="cb7ccb3db519bc2875de1dabcd451b442c12798744418770c8410dde2ba0100796f4ffdf1563a59119dc20ad3a7b4caf9bde5cbc0a2c6ae8b1d075f784a41e622292ea58d7628b44525667fc6539ff62a3ca16beb76ef2710c237cff3444b82f3aeb693f0bb38176aabc72906cf205f52899ea4e02884d7bcd50b54f3c92f417fd497a1ff7593943980f043de263f37130d552a77929310a206cc20bb39e50edf25c226059ca521f2041f166534a5c661afbbab26db7d9b6c385beb4be5b1a6af8acb308e11738d6ac905fa0233ec2186425ea6e0249f2c0559b65bd01cb845f0e755c077fffa833c199c5ffa607b13cdd3324e0addf9c7757", 0xf9, 0x7}, {&(0x7f00000005c0)="1992d6d95c976fda987526b007f7748c10352a65680f31c11b4a9817927366e3cc6715ecfc279b28ea6803b99929bdc0c39d8b6413d386607293713e1dc2f1c77c882e03256cd2bf16d3e7590dca82c3f84c816d830f6d8ab0d65989b9f22b700e792e913f606d7c0698d15b8177f2ecb41dd561603dacacf36be97d0b5dc3ca312680d015a278076e3e69c2", 0x8c, 0x9}, {&(0x7f0000000680)="3442821f0c5db7d225befbdf5e503053d5d95e383c1fb5256cbdfa1548bdd42e19dd99781e86097ffdfdc11ba2ea2dc90798444f9364ccdf58bf0a240c667310448c9201c4", 0x45, 0x4}, {&(0x7f0000000700)="c7437d19be9b7132c600ebc081bce0b6df61bf34fb8d1d7aafa6b535bc98c543a56500776e0a300bf0d239c8656c1c82ab43", 0x32, 0x2}], 0x81401, &(0x7f0000000800)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6b]}}]}) pwrite64(r1, &(0x7f0000000840)="dc8641645ede45221be4eddda7824b612a34b171d61029b2d550efb15927ad335f930906c1d23d8bd302dc49c44d3fc48937874038e268ce8226cfd5365783880173d2c6d035bd1377fcfb927f89e0b4fdeac505cec589141823f9570d5ea98ee28bfd808b2ad8e435ee67ab95e3fb55d61c96cdc67163c5b3375fbd5e822967ee0b44ccd0445f9bb45ab076294f3327143acd5f1023dbf899ebf002b6443cd47ccb8fe5c01ce41a1b1beab4212156e093079dc6d599d4e59c4c6f4593629d962492e8cd7b5233c2f7731f0ccda83b84208dc6df3c9a", 0xd6, 0x7) 17:14:46 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2947c0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) fcntl$addseals(r2, 0x409, 0x4) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f00000001c0)) fcntl$setsig(r3, 0xa, 0x26) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 17:14:46 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x6000000, 0x0, 0x0, 0x0}) 17:14:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x227b, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1573.378038] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1573.379340] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:14:46 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) [ 1573.383933] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1573.385242] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1573.420306] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1573.420980] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1573.452446] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1573.453090] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:14:55 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0xf, 0x0, 0x4}}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000040)={0x8, 'rose0\x00', {'batadv0\x00'}, 0x7fff}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6) 17:14:55 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) dup(r0) ioctl$SG_IO(0xffffffffffffffff, 0x2203, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:14:55 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0xff00}, 0x3) 17:14:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xfffffff, 0x0}) 17:14:55 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:14:55 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x6802, 0x1) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000001c0)) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000080)={{r0}, 0x0, 0x8, @inherit={0x58, &(0x7f0000001080)={0x1, 0x2, 0x6, 0x2400000000, {0x6, 0xffffffffffff6c84, 0xfa, 0x1, 0x7}, [0x7, 0xbc00]}}, @subvolid=0x1}) pread64(r1, &(0x7f0000001100)=""/237, 0xed, 0x5) r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r5) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xfffe}, 0x6) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000001200)={{0x1, 0x1, 0x18, r0, {0xd1}}, '.\x00'}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001240)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000001280)={"4adac2b7aa7ee872857fcc77c92bee39", r7, 0x0, {0xaed7, 0x5}, {0xfffffffffffffbff, 0x9e8}, 0xb9, [0x6, 0x0, 0x9, 0x5, 0x3, 0x100, 0x0, 0x45, 0xfffffffffffffff9, 0x6, 0x7, 0x400, 0x100, 0x3, 0xe01, 0x81]}) 17:14:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x227c, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:14:55 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x9000000, 0x0, 0x0, 0x0}) [ 1583.223667] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1583.225085] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1583.230951] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1583.232293] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1583.245733] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1583.247111] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1583.279531] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1583.280886] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:15:05 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) dup(r0) ioctl$SG_IO(0xffffffffffffffff, 0x2203, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:05 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 17:15:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x4}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x1}, 0x6) 17:15:05 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:15:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0x1, 0x2}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40800) r2 = dup3(0xffffffffffffffff, r0, 0x80000) bind$bt_hci(r2, &(0x7f0000000300)={0x1f, 0x4, 0x1}, 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, &(0x7f0000000040)="89f41a5de17c2a3146cade364b001dbd0d66edf72554c813b4045559b37b7b1baced3120684de2e2a47544cd1daa92697b74474d74fad009a021518a11defc3377062c23c8a110cb4acaddab6833ad0b685f5d39b6533aa528e7b401f76a2e6337172cf5282f28d17383aa54c04c41470b9c9e6bad35d647347925683c7435048ae380fee8142dedcb7e86a6471214b83d6e387aa153cc6b1795705d500268c7eec85f6ed6b7bcba3857380652e7a6ae3cf8f23e0ea12b7389042cc7dd210a0b03d0a63bb68cf3ec1d2acec3d2fe980eef3f8c697ef193807e472b91ce3989f874011aa7aa5df4216c46f8f5f793fc26771b2421f8198a222f") 17:15:05 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xd000000, 0x0, 0x0, 0x0}) 17:15:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x227d, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xf5ffffff, 0x0}) 17:15:05 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) [ 1593.146184] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1593.146911] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1593.151747] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1593.152434] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1593.153233] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1593.153917] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1593.175471] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1593.176143] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:15:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xf6ffffff, 0x0}) 17:15:05 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, 0x0) 17:15:05 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xfffffff, 0x0, 0x0, 0x0}) 17:15:05 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b41", 0x30}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:15:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x227e, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) write(r0, &(0x7f0000000080)="65b8f40c5e47ab05ee828ecba96cb89c1660d236310423addd69e6bf93189232d7687ae3b722d7b18017", 0x2a) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_set_ext_scan_enable={{0x2042, 0x6}, {0x6, 0x41, 0x9, 0xfff9}}}, 0xa) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0x4, 0x2}, 0x6) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x6802, 0x1) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x1) [ 1593.274890] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1593.275577] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1593.278426] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1593.279088] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:15:06 executing program 4: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x6802, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x5}, 0x6) 17:15:06 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) ioctl$sock_bt_hci(r1, 0x400448ec, &(0x7f0000000040)="29f758e2db5415ec4c569aa2f60e5bfdb6b849128ea7db6b1f63874ae24faf3d0178651479e79b2fcf57cc6b2f51df205c1dd56c81fe1a4f841c979e5426cadc62dc2bf1702aa67e035af3b6afb523500c6afa4ba4b0b1267d6dc535083fbc3857e73fb161a2a2621b3045aca2402519d84603aea5b61971f50e1108ea193c0870c92506ab") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0f000000b83c42fadf282f4ed2e02615f710bf1f9adb486a531ac71d0d7f4b1a2b9c360a096b1af9f674f7733875197771c7b5b1153bf3b4bba679ee942da57814416e79c36234655a5b6e6a75aa3596ecc1669c1911a77b8a7099e6a968175391e8b3f41c967f686ba54723ef033ea2919d39c1fa9fb860f3c7b7962917c43d31814e470c6bb3fcf99e7b23d4512f9828ca63bda0ba19c4cbefdb1f7b19b1d10c5adb59198ef69d25ccd4dff0d723c47da3fe2970746caafdb115f5623769e5166d7d558629e846a57718d5ee0667c28afceba1aa694c"]}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 17:15:06 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, 0x0) 17:15:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xfdfdffff, 0x0}) [ 1593.332108] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1593.333559] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:15:06 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b41", 0x30}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) [ 1593.354551] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1593.355944] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1593.375721] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1593.376417] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1593.378585] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1593.379243] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:15:06 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x6802, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x5, 0x2}, 0x6) 17:15:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xfeffffff, 0x0}) 17:15:06 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b41", 0x30}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:15:06 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, 0x0) 17:15:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x227f, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:06 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xf5ffffff, 0x0, 0x0, 0x0}) [ 1593.481481] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1593.482228] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1593.486876] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1593.487532] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:15:06 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) 17:15:06 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b", 0x48}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:15:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xfffffdfd, 0x0}) [ 1593.536904] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1593.537633] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1593.571340] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1593.572051] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1593.574879] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1593.575579] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:15:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000080)="9d97cf6e9f8b956e612e61ebceec38566b1c2457b080ca4e5b0d9a9441e2d0fa5df13b2e45a487fefac13c18e0338a88e8b40f4e2cae3ed5a6e9d15cef9a5b6c917dcd2b9792951e62d4fb3ba5dd65c4d248425567b26f9a6e4e893a607499d3987333b249ae2af3298d795691d26943920854f69c209ac0fd250465829a083a2af3014eb490f50b74c65af5d1cbeb7b30fca298f892f75d8f9b08c4e3917660048a2d479307a9cc241ef66f596abdda35f2370d8c7d3188039c16e335f9033efa38ff1f608d") 17:15:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) 17:15:15 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xffffff0f, 0x0}) 17:15:15 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b", 0x48}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:15:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2282, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:15 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xf6ffffff, 0x0, 0x0, 0x0}) 17:15:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x4}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x7]}, 0x8, 0x0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x6802, 0x1) bind$bt_hci(r3, &(0x7f00000001c0)={0x1f, 0x0, 0x4}, 0x6) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, r5) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, @ethernet={0x1}, @l2={0x1f, 0x6, @none, 0x1}, @qipcrtr={0x2a, 0x2, 0x7fff}, 0x2, 0x0, 0x0, 0x0, 0xffff, &(0x7f00000000c0)='veth1_to_batadv\x00', 0xfff, 0x3, 0x9}) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x9, 0x4) [ 1602.897713] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1602.898723] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1602.941245] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1602.942630] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1602.949287] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1602.950660] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:15:15 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x4, 0x6, "dc23ec", 0x2, 0x64}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) [ 1603.930882] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 1603.932156] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 1605.107036] Bluetooth: hci4: command 0x0406 tx timeout [ 1607.154950] Bluetooth: hci4: command 0x0406 tx timeout 17:15:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2283, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x1, @disconn_logical_link={{0x43a, 0x2}, {0x81}}}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 17:15:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0xfffffffffffffe0c) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000040)="0b8780c46a3d32f43e9cce7c5e8e78e2a892fea764b615064ee659e871469e38ed3f7a11bbdc91023adc24b41ee983c3") 17:15:25 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b", 0x48}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:15:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xfffffff5, 0x0}) 17:15:25 executing program 6: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x6802, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x5, 0x2}, 0x6) 17:15:25 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xfdfdffff, 0x0, 0x0, 0x0}) 17:15:25 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x6802, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0xb}, 0xc158f9e5) [ 1612.880799] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1612.881487] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1612.908295] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1612.908951] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:15:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1612.935748] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1612.936388] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1612.940294] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1612.940940] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:15:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:15:25 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xfeffffff, 0x0, 0x0, 0x0}) 17:15:25 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032", 0x54}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:15:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xfffffff6, 0x0}) 17:15:25 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 1) 17:15:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1613.047034] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1613.047669] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:15:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0xc) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000040)="ce4b9cbf5d03b6ae67b20622df9a22996fa32a93798be7a9601fdff11e3c423e51efff6098b188864841822a4ddece3fc11335d25aa0e4161221f488b725aa3eab0f4f1d41875cf82eea63c6fbe79a9f84692cd107a6156425d89c2f92f4dfb99399fd66390125fe43f197d1602075ac343f975ecb5dcb1fcbd1fd9a3293f25a773d9c") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffb, 0x2}, 0x6) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) write$bt_hci(r2, &(0x7f0000000140)={0x1, @logical_link_cancel={{0x43b, 0x2}, {0xc8, 0x8}}}, 0x6) [ 1613.085304] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1613.085981] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:15:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x40, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) write$bt_hci(r1, &(0x7f0000000000)={0x1, @le_del_from_resolv_list={{0x2028, 0x7}, {0x1, @none}}}, 0xb) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, 0x1) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x400001) pread64(r3, &(0x7f0000000200)=""/229, 0xe5, 0x1) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000180)=0x57, 0x4) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000040)) [ 1613.138674] FAULT_INJECTION: forcing a failure. [ 1613.138674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1613.140410] CPU: 1 UID: 0 PID: 11190 Comm: syz-executor.6 Not tainted 6.18.0-rc1-next-20251015 #1 PREEMPT(voluntary) [ 1613.140449] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1613.140471] Call Trace: [ 1613.140483] [ 1613.140497] dump_stack_lvl+0xfa/0x120 [ 1613.140540] should_fail_ex+0x4d7/0x5e0 [ 1613.140572] _copy_to_user+0x32/0xd0 [ 1613.140604] simple_read_from_buffer+0xe0/0x180 [ 1613.140634] proc_fail_nth_read+0x18a/0x240 [ 1613.140669] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1613.140703] ? security_file_permission+0x22/0x90 [ 1613.140738] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1613.140770] vfs_read+0x1eb/0xc70 [ 1613.140807] ? __pfx_vfs_read+0x10/0x10 [ 1613.140845] ? lock_release+0xc8/0x290 [ 1613.140877] ? __fget_files+0x20d/0x3b0 [ 1613.140918] ksys_read+0x121/0x240 [ 1613.140947] ? __pfx_ksys_read+0x10/0x10 [ 1613.140988] do_syscall_64+0xbf/0x390 [ 1613.141023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.141045] RIP: 0033:0x7fad3e8d769c [ 1613.141062] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1613.141083] RSP: 002b:00007fad3be9a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1613.141105] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fad3e8d769c [ 1613.141120] RDX: 000000000000000f RSI: 00007fad3be9a1e0 RDI: 0000000000000006 [ 1613.141133] RBP: 00007fad3be9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1613.141146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1613.141159] R13: 00007ffdb13c78ff R14: 00007fad3be9a300 R15: 0000000000022000 [ 1613.141192] [ 1613.172695] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1613.173937] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1613.187189] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1613.187849] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:15:25 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xfffffdfd, 0x0, 0x0, 0x0}) [ 1613.217286] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1613.217912] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:15:34 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:34 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xffffff0f, 0x0, 0x0, 0x0}) 17:15:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2287, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:34 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032", 0x54}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:15:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xfffffffe, 0x0}) 17:15:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) write$bt_hci(r1, &(0x7f0000000080)={0x1, @change_conn_ptype={{0x40f, 0x4}, {0xc9, 0x6a}}}, 0x8) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x4}, 0x6) 17:15:34 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x140, 0x48) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, 0x0, 0x7, 0x201, 0x0, 0x0, {0x2}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3ff}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x100000000}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xee6b}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r2, &(0x7f0000000900)="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", 0x200) dup2(r1, r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x24800, 0x0) sendfile(r2, r3, 0x0, 0xfdef) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r4, @ANYBLOB="000025bd7000fcdbdf2508000000140001800e0001006574683a7866726d300000005c000480140007800800030000feffff08000200020000000900010073797a30000000002400078008000400c000000008000400040000000800040008000000080003000200000014000780080204000200000008000200010000004000078008000100040000000c0003003f001b00000000000c000400050000000000000008000200070000000c000400332c0000000000000800020004000000"], 0xc4}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe0, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9ff4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth0_vlan\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 17:15:34 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x6802, 0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, 0x1) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) [ 1622.138239] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1622.139475] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1622.141812] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1622.142975] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1622.152456] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1622.153527] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1622.175912] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1622.176983] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:15:34 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:34 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032", 0x54}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:15:45 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xfffffff5, 0x0, 0x0, 0x0}) 17:15:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2288, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:45 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19eb", 0x5a}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:15:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xffffffff, 0x0}) 17:15:45 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) ioctl$sock_bt_hci(r1, 0x400448ca, &(0x7f0000000080)="dae009d18ed973307902b9f191a52eca62d3d0ccede4fd1199e5a7064d10dc289dfaddd5901b4481dc7cb6fe38dc30d1e1b0f55bc27cea925325b5b603b569f714a0cf240df4d1ea0d3c3c65a8293c1342c717544a1767cd318c20611e8328ee0731990dfd290fb81fc3844d7b7a2a8c1766e87d288e532661e9fce36b60b1ca853cb48548f4cc088ed5676de93b1aaca88166c52a158e942c22614b9c0a461f77d2182f") write$bt_hci(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="01390421c9077fb07cc0cc000080080000c90400001d05ff7f6d000000254200c50a000056000100"], 0x25) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 17:15:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000040)="36e498497ab76ef8dfc83dc55a5d3c8fd144b56b70196cf19053") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 17:15:45 executing program 5: r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=""/165, &(0x7f0000000140)=0xa5) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) getpeername$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, &(0x7f00000001c0)=0x1c) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, 0x1) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:15:45 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x1267, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1632.473719] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1632.474485] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1632.483880] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1632.484597] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:15:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1632.524396] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1632.525868] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1632.556260] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1632.557019] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:15:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2289, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/53, 0x35}, {&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000000140)=""/112, 0x70}, {&(0x7f00000001c0)=""/174, 0xae}], 0x4, &(0x7f00000002c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}], 0x1, 0x10001, 0x0) write$bt_hci(r1, &(0x7f0000000400)={0x1, @create_logical_link={{0x438, 0x21}, {0xc8, {0xff, 0xff, 0x0, 0x0, 0xfc83, 0x2}, {0x6, 0x13, 0xf9, 0xffff93ed, 0x200, 0xd80}}}}, 0x25) 17:15:45 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xbfff, 0x2}, 0x6) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.pending_reads\x00', 0x40000, 0x60) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x3, 0x3}, 0x6) 17:15:45 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xfffffff6, 0x0, 0x0, 0x0}) 17:15:45 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19eb", 0x5a}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:15:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) [ 1632.672635] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1632.673319] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1632.676326] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1632.677061] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1632.726944] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1632.728266] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:15:53 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x1274, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:53 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xfffffffe, 0x0, 0x0, 0x0}) 17:15:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x4b47, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 17:15:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_scan_rsp_data={{0x2009, 0x20}, {0x3f, "bcdbe607c113ca6fec24e49aae9017b0bda4351fce75265d7424d2f0041f19"}}}, 0x24) accept(r0, &(0x7f0000000080)=@can, &(0x7f0000000100)=0x80) 17:15:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0137da812e6b799800000000c04a3a1c04020000"], 0x6) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000040)="ea8bee19a99c61e41deb4ace714bacbba9578c423f34996ac98cc2fedee751060eb8dddcca0d42cb94af284a115a7f09eefcd666f833215861d1e1f6239b60eb612e3f2923d655acd804f6735b99607780ec64a339f65bab6ee6871ece9264d1b24fa17ac84e64deabaf5d70c230bb0a936e119cad2b74e80c7f94026b971df9b437d2e0caec7ee97a7553e805d1") ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000140)="01886f397ccd936c580d6086ecdc484edb87fe8ae14d2093837960963bacbd531384a3e8deb8f057cd2682a0b52c14451ae6a536abb746d8") 17:15:53 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19eb", 0x5a}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:15:53 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4}, 0x6) [ 1641.171979] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1641.172651] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1641.181291] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1641.181932] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1641.213974] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1641.215446] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:15:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 17:15:53 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468", 0x5d}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:15:53 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x1275, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:53 executing program 1: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000001c0)) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x33, 0x410000) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc014}, 0x801) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) [ 1641.259752] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1641.261073] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:15:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x4b49, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:15:54 executing program 5: prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x1, 0x6, '3T?', 0x81, 0x68}) [ 1641.343211] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1641.344549] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1641.347934] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1641.349244] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:15:54 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xffffffff, 0x0, 0x0, 0x0}) 17:15:54 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x6802, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 17:15:54 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f00000000c0)="b9f2a118c0f2cc8efac29e8fd42fe57e970ea2eb5a638940475642f21b6335848a3df54b764987091919fd6a9bb902e297b563fede82ff263fdee91720c68299eaf31b8c2b02ce0fd7d4719974e9565a21ed8151a682eaee7dafc656669d233d96694042146acff5") write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01450446aaaaaaaaaa1162cc42a29e43c544d4b41210b6b0e6782976891146209e4c777a055caae35823d69066c9a1a786a76fe4febe565c48eefbb83cf63d7302a0a198ab9700000000"], 0x4a) 17:15:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) 17:15:54 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40001, 0x90) r2 = accept(r1, &(0x7f0000000040)=@l2, &(0x7f00000000c0)=0x80) recvmmsg(r2, &(0x7f0000004c40)=[{{&(0x7f0000000180)=@sco, 0x80, &(0x7f0000001480)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/239, 0xef}, {&(0x7f0000001300)=""/71, 0x47}, {&(0x7f0000001380)=""/38, 0x26}, {&(0x7f00000013c0)=""/159, 0x9f}], 0x5, &(0x7f0000001500)=""/89, 0x59}, 0x7}, {{&(0x7f0000001580)=@caif, 0x80, &(0x7f0000003600)=[{&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x2, &(0x7f0000003640)=""/222, 0xde}, 0x10000}, {{&(0x7f0000003740)=@can, 0x80, &(0x7f00000039c0)=[{&(0x7f00000037c0)=""/242, 0xf2}, {&(0x7f00000038c0)=""/174, 0xae}, {&(0x7f0000003980)=""/33, 0x21}], 0x3, &(0x7f0000003a00)=""/207, 0xcf}, 0x10001}, {{&(0x7f0000003b00)=@ax25={{0x3, @netrom}, [@default, @netrom, @null, @bcast, @netrom, @bcast, @netrom]}, 0x80, &(0x7f0000004b80)=[{&(0x7f0000003b80)=""/4096, 0x1000}], 0x1, &(0x7f0000004bc0)=""/115, 0x73}, 0x5}], 0x4, 0x100, &(0x7f0000004d40)={0x77359400}) r3 = accept4(r0, &(0x7f0000004d80)=@nl=@unspec, &(0x7f0000004e00)=0x80, 0x0) recvfrom(r3, &(0x7f0000004e40)=""/219, 0xdb, 0x40, &(0x7f0000004f40)=@hci={0x1f, 0x3, 0x1}, 0x80) write$bt_hci(r1, &(0x7f0000000140)={0x1, @sniff_mode={{0x803, 0xa}, {0xc8, 0x4, 0xff, 0x101, 0x8001}}}, 0xe) 17:15:54 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468", 0x5d}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) [ 1641.488945] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1641.490299] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:15:54 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x1276, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1641.516717] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1641.518006] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1641.535623] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1641.536280] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1641.538143] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1641.538773] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:16:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x5382, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:01 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2201, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:01 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468", 0x5d}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:16:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:01 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:01 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x6802, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0xb6686555aacc0f50) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x8001, "46b099", 0x5, 0xbe}) 17:16:01 executing program 1: clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x2710}, {r0, r1/1000+60000}}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) 17:16:01 executing program 5: r0 = socket$inet(0x2, 0x5, 0x5) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000480)={{}, r1, 0x4, @unused=[0x4, 0x8, 0x8, 0x20000000], @devid}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001480)={r0, 0x2, 0x1}) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x6802, 0x1) openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x0, 0x0) pwrite64(r2, &(0x7f00000014c0)="26c8f28dc1c348fe962ccd454d5cf36ad9f99f3c9204ba6161df9cd91f76fd65c5c78133998ba172afaa476fca435b73e306b092b2d139864103", 0x3a, 0xcadc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) [ 1649.007573] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1649.008259] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1649.010470] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1649.011165] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:16:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x407, 0xc0800) write$bt_hci(r1, &(0x7f0000000080)={0x1, @read_clock_offset={{0x41f, 0x2}, {0xc9}}}, 0x6) 17:16:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 17:16:01 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2202, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1649.080845] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1649.081508] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1649.086051] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1649.087410] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1649.097076] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1649.097697] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:16:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 17:16:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 17:16:01 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x2, 0x0, 0x0}) 17:16:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000040)="dc653c13609d106bc4e3bf7690d9114794df2b9d4a423dd3b857f5ed1c180c88f3f39b51b322b2750192f698878f3a0c8181d2ba01325dd799b763e4f48ef1d4d9d0a10f5d3640b5867db893561f9af271f56a70ed0bfa89883ea71f0dbcdbaf304c43332b065ca409a360e76da0672f9a") r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000001300)={0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) preadv2(r1, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/43, 0x2b}], 0x1, 0x3, 0x7, 0x1a) ioctl$sock_bt_hci(r1, 0x400448dc, &(0x7f00000000c0)="391675fb97c16e4925cf843510ff505e6ba3b8a6a442fd749c3f60c5f2033919f225b506ecce4d1216a76564c38cffe2c956447264a03329dca769e7a42c2924913b3ceb63378194d3be02151ae1c99b0a117f42757bfd909ceb306472f4be8652975a6bba8627b0e0352115207a9c204f1464d6b2d5e8d3455923ed067ea27317d0c742a9793739c1a4c92cf5ec3a8e93be672a6dbe400cd4d4c4876243b377dff9c1d2578941f9604bd73d7bd4101bcd1cb08a86b6f4b6ae7eb00b900a8ad9b8e574aaf4a7cf35a20d12258aaed70880c5370d300923a1c79681c474dd7e90638886f9ebf9bc") ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f0000000240)="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") [ 1649.204240] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1649.204916] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1649.207197] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1649.207858] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:16:01 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2205, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x5385, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:01 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x325401, 0x0) connect(r0, &(0x7f0000000080)=@vsock={0x28, 0x0, 0xffffd8ee, @local}, 0x80) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) 17:16:01 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973", 0x5f}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:16:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) [ 1649.274890] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1649.275563] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1649.301532] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1649.302186] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1649.382198] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1649.382877] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1649.385894] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1649.386504] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:16:10 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd(r0, &(0x7f0000000040)={[0x4]}, 0x8) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0x2, "c7aafc", 0x1, 0x5a}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x1, 0xfff, "224e17", 0x1, 0x3f}) 17:16:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x92000, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xbfff}, 0x6) 17:16:10 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2270, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:10 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x6, 0x0, 0x0}) 17:16:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000040)="561cb340bb363cf4dab1cf52012d0729362a2989ac658473e831242b195a0595b71825b53cd04aa200f34b5c3793d5cde5be105afd75f736bc40cb645a316e9e0a75970a077ce0065e8f49") 17:16:10 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973", 0x5f}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:16:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x5386, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) [ 1657.885256] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1657.886557] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1657.888064] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1657.889272] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1657.900942] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1657.902173] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1657.924603] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1657.925784] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:16:10 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973", 0x5f}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:16:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_cache\x00') ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000080)="5d4feb5d15b6d5d44f823b074a7453e67adc19964db5aaa1a51c73a7e7092df68c935effee6699a2717d48ebd382b4e3866c46f7626377e3b0eebb27ec464533aa6b9e8b9a7ec490ea4ab4efc41c8360dbf39aafdbd888919b970cc640c61525cce2f48b3213145ac21d") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) 17:16:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000003c0)=0xb53, 0x4) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000340)={{}, {0x10e}, 0x0, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)="8a8da96f4fdfb9ae094c38f3a6b15cc5c13861b94eb661d361edcadd813b9d72907694076769eacac1328e5d5e0e9a7435ba26503d4dcb715bf2d54666a1170fe44a8bcc384a85da8847da5b3d0128ff5bf46a85a51793c4b987c14d60db1e62c7d8d1ff837833b168c15f8441067b", 0x6f, 0x0, &(0x7f0000000200)={0x2, 0x119, {0x1, 0xc, 0xed, "21e051b92eb97077be92b03ae0e5895f6351bf40501af5ea2cf92003a64ea305b77271b949c878331dcf8f3fe1e2c8dfb14e0d5cf2202de200f770b5728f4e441b3eb43cd68b625f0e35d788be72c886e133eecab53c9b8ee6216c3213e55429eed541f7f27ee50e5df7c8ea711d60f53a6b7370953b0771f78f7a4b1330fd7b237d42b655d75a94fb0c1b5943f9a2cb94cf20bc47de4b45093f81bffd000305f1a251998a28a7c8bc9ef9213139505939945a5c038441bdf732d2a9896c562e5380fa9a1a3c5a9c9b9c54eae57d00d95985d09a258a37fb90b628f38c99017991ea11266d449561ffb987e512", 0x1f, "40ca581dd4f670548126f070bb3805aa15ba8837f0d722844268d9bd96fd62"}, 0xd, "848456c8018ae133e16af1e9c9"}, 0x132}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @le_start_enc={{0x2019, 0x1c}, {0xc8, 0x0, 0x6, "d5e8f2a539c01bcdbf66dc8c8ab36815"}}}, 0x20) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x6, 0x3}, 0x6) setxattr$security_capability(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480)=@v2={0x2000000, [{0x100, 0x40000}, {0x4, 0x9}]}, 0x14, 0x792f77af3ae673de) r1 = openat$incfs(0xffffffffffffffff, &(0x7f00000004c0)='.pending_reads\x00', 0x400, 0x20) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2, {0x1000}}, './file0\x00'}) 17:16:10 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2271, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x541b, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1658.103745] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1658.105022] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1658.123223] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1658.124435] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1658.763029] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1658.765254] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1659.956441] Bluetooth: hci1: command 0x0406 tx timeout [ 1662.004235] Bluetooth: hci1: command 0x0406 tx timeout 17:16:21 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2272, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:21 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x9, 0x0, 0x0}) 17:16:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0xffffffffffffff58) socketpair(0xa, 0x2, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x5a, 0x4) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x40012041, &(0x7f0000000140)={r2, r3+10000000}) 17:16:21 executing program 4: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040), 0x6e, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/102, 0x66}, {&(0x7f0000000140)=""/121, 0x79}, {&(0x7f00000001c0)=""/120, 0x78}, {&(0x7f0000000240)=""/240, 0xf0}, {&(0x7f0000000340)=""/216, 0xd8}, {&(0x7f0000000440)=""/195, 0xc3}, {&(0x7f0000000540)=""/153, 0x99}], 0x7, &(0x7f0000000680)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x41) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f00000001c0)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r6, 0x1, 0x0, 0x0, {{0x7}, {@void, @val={0x8, 0x3, r8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001940)={&(0x7f0000000800)={0x1120, r4, 0x10, 0x70bd27, 0x800, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfffd}, @NL80211_ATTR_FRAME_MATCH={0xf7, 0x5b, "37eb9deea3744e855782c31b6ace583c4aae2799c8784c47164380241539156e3a585d6d311f8df3b2b0de7fd052e213ff01358e287f3daaaf61c47058f12621780592e367ea858391e41cc0955f02db84ade99cd1766a0a36c7df6377ff2e88b2d80b6d241bd619158e7fec26047d48d4961ae53dc75b88747b941b1fd671983f6ce9a5682ad10698777b3865de414d7492437e5a74f30cd2caa06c36411ee1b29a824ff59a2d0f5eefd823c6e52001b738d2d9d5616d9bbbee3c566237288e2d52cc72b60bd06df5f13306ceac2d72613bb3ab21f390de32c1a5d2b78e6a567a0520e4e279dda1ac832b981ef4037266a235"}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}]}, 0x1120}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) fchdir(r0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000740)) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 17:16:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) r1 = accept(r0, &(0x7f0000000140)=@tipc, &(0x7f00000001c0)=0x80) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000200)="aa0c7262968e253128e5c9d1f6d7dc7d683c5cc48316b326b8688f29264e6932762284baffbc8516c9431169f49c7bb0443b438ceab52d8720d8af2cab7716d2a52d58606cf12c79ea105c94013d871f155fca4b4aad99585e18a178d51ccf87f443d2a066ac46e6bd1cd0") getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000040)=""/179, &(0x7f0000000100)=0xb3) 17:16:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x5421, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 17:16:21 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, 0x0) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) [ 1669.061407] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1669.062096] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1669.065839] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1669.066468] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:16:21 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, 0x0) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) [ 1669.099897] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1669.100571] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1669.114727] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1669.116017] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:16:31 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000340)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000040)={0x2, 0x100, "d71d81", 0x1f, 0x2}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x6802, 0x1) ioctl$sock_bt_hci(r3, 0x400448c9, &(0x7f0000000080)="00909f860db59b514afa5c4fc2516bc199ef194b9eabf4bea1651384a7b6cb70cb97fee5da979b3b6a494dd59254c373fdcf9fc839f70118") 17:16:31 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x5450, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:31 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000001080)={"690dc7487096a807474218d373d157d3", 0x0, 0x0, {0x81, 0x1}, {0x4, 0x8}, 0x1, [0xaa, 0x3b, 0x8001, 0x4, 0x1fdeedc7, 0x100, 0x9, 0x5, 0x5, 0xd50a, 0x4, 0x4, 0x8000000000000007, 0x3, 0x5, 0xffff]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000080)={{r0}, r2, 0x16, @inherit={0x68, &(0x7f0000001180)={0x0, 0x4, 0x1, 0x7, {0x12, 0x0, 0x2b, 0x2, 0xb9ad}, [0x33b, 0x100001, 0x0, 0x5]}}, @name="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"}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 17:16:31 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0xd, 0x0, 0x0}) 17:16:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 17:16:31 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, 0x0) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:16:31 executing program 1: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x6802, 0x1) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) 17:16:31 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2275, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1678.602113] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1678.603650] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:16:31 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x5451, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x8, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3, 0x1}, 0x6) 17:16:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 17:16:31 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2276, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:31 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:16:31 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x5452, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x9, 0x2, 0x1000) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0xffffffffffffffff, 0x5, "977517", 0xb4, 0xf3}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 17:16:31 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:16:31 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) 17:16:31 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x600, 0x0, 0x0}) [ 1678.816722] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1678.818025] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1678.831189] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1678.832510] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1678.864537] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1678.865260] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:16:40 executing program 5: ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000080)=@sha1={0x1, "5e0ecad73a1a8e9e172e61e663dedcce159fd3e6"}, 0x15, 0x2) r1 = memfd_secret(0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x4, 0x1}, 0x6) 17:16:40 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:16:40 executing program 1: mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs\x00', 0x1ff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4a) 17:16:40 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x900, 0x0, 0x0}) 17:16:40 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) 17:16:40 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2279, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:40 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x5460, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:40 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 1687.799146] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1687.800280] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1687.816462] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1687.817777] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1687.821736] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1687.823033] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1687.832299] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1687.833567] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:16:40 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x40049409, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:40 executing program 5: read$ptp(0xffffffffffffffff, &(0x7f0000000080)=""/252, 0xfc) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0xfffffffffffffffd}, 0x6) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000180)={0x0, 'ip6gretap0\x00', {}, 0xfe00}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, 0x4}, 0x6) 17:16:40 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) write$bt_hci(r1, &(0x7f0000000040)={0x1, @user_confirm_reply={{0x42c, 0x6}}}, 0xa) 17:16:40 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x2, 0x9, 'iG^', 0x1}) 17:16:40 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:16:40 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:40 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0xd00, 0x0, 0x0}) 17:16:40 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x227a, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:40 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x40086602, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1688.064263] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1688.065643] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1688.072552] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1688.073464] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1688.102934] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1688.104267] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:16:40 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x1, @write_eir={{0xc52, 0xf1}, {0x4, "21b1c61df3a3135c78347c2353f0badc0635f53fcf3826f6c1cf3a5b7e371ac97362823571e1a1cd2555240f7ea7b71795d1cbf6b2f2536ad8c619139f5cf1247b00ea1cdfa45e5ecf8b63f01a47432433f49ce7aa41467392745c1d1866c1c43a1fc49d522105771c69fd7828603e660d94df2b0e0958eab4f4c2638d5dbca2eb073093406fc3966b46aac03a6add5bb81e929919c554b827ed8193f9b16f0948af0522b9d98885670ed6bf4a4e0cbbea8017427fe58636dc32b9658e5450da0ff396b5ad146f7bba3e4de4ba7a02d5f2903ea802dcca6dbc2e3846d0040d4634f43dace58b468fc92590980d3d20c1"}}}, 0xf5) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x7, 0x8, 0xf08f, 0x80, 0xffff}) 17:16:40 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, 0x0, 0x1000, 0x100, &(0x7f0000002640)) [ 1688.149389] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1688.150679] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:16:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 17:16:50 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x227b, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:50 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, 0x0, 0x1000, 0x100, &(0x7f0000002640)) 17:16:50 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 17:16:50 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_local_ext_features={{0x1004, 0x1}, {0x80}}}, 0x5) 17:16:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x40087602, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:50 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0xfdfd, 0x0, 0x0}) 17:16:50 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x10001, 0x24001) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="daaaaa74ca5fbc6c826111505e4400074da989dd6641867ff76daac7e4a2a46dca7eba5313c0d0d268514b6ee6970299bc20778cfa697c983926e32f89092e66eb72a4451546e413df65cd2fcba806ebb5cdb61cbeea47e05c3a97c437d41d15b62a7e01ae7b2cfb0ff21411ba9575dac997934083f701874e6c79ded65cfdfd8ad95f7f", @ANYRES16=r2, @ANYBLOB="04002abd7000fbdbdf250900000005002f000100000005002a0000000000050035002000000008003900060000000a000900ffffffffffff000008000b00ff000000050037000100000005002a0001000000"], 0x58}}, 0x4804) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) [ 1697.660856] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1697.661549] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1697.666873] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1697.667553] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:16:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 17:16:50 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x227c, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x401c5820, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:50 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x1000000, 0x0, 0x0}) 17:16:50 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, 0x0, 0x1000, 0x100, &(0x7f0000002640)) [ 1697.778051] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1697.778730] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:16:50 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001080)='./file0/file0\x00', 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0xffffffffffffffff, 0x5, "4873ad", 0x3, 0x9}) [ 1697.804588] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1697.805239] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1697.811686] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1697.812919] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1697.818110] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1697.819325] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:16:50 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x227d, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r3) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000004a6dfacda4ae0854a1", @ANYRES16=r4, @ANYBLOB="00002bbd7000000000000f0000000500350000000000050030000100000005002e00000000000500380001000000"], 0x34}, 0x1, 0x0, 0x0, 0x800c}, 0x1c) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x20, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x8004841) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f00000001c0)={{0x5, 0x1}, 0x100, './file1\x00'}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 17:16:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 17:16:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x705781, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0xe741, 0x4) 17:16:57 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x3}, &(0x7f0000000080)=0x28) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:16:57 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x227e, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x4020940d, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:57 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100, &(0x7f0000002640)) 17:16:57 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) close(r1) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, 0x1) write$bt_hci(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="010ba51f405e6566460423"], 0xb) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x6802, 0x1) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f00000000c0)=0x3, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x1ff, 0x4) 17:16:57 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x2000000, 0x0, 0x0}) [ 1705.260524] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1705.261296] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb [ 1705.264152] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1705.264882] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid field in cdb 17:16:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x80086601, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) 17:16:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, 0x1) ioctl$sock_bt_hci(r2, 0x400448ca, &(0x7f0000000080)="396b208a9618f0d06fc975d6075dd7678f1c1e64042600eb23bcabd8b37365c40372146fef412a902fed86db9d1684ba37baf0d3883bbda95dc37578f352c508604b9a3ce966a860e454a40edd0019b301ed0675526ce1970e9cbbd2c915dc66f9131143d57b9f69859f0fb082dccfb1ab56121bce68d1f8f62f80d9fe5f47aa8ef0d1e4cd32e0c63085dc8d738e04ce24795ae8686728641f21d07f3df8505d73218e") ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) ioctl$sock_bt_hci(r1, 0x400448df, &(0x7f0000000040)="5f9367f89db725251968ab44bca5f5c1f1") r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x305401, 0x0) epoll_wait(r3, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x5, 0x1) 17:16:58 executing program 5: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000001c0)) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x81]}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r1, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@sco={0x1f, @fixed}, 0xffffffffffffffa8, &(0x7f0000000400)=[{&(0x7f0000000180)=""/59, 0x3f}, {&(0x7f0000000280)=""/89, 0x59}, {&(0x7f0000000300)=""/242, 0xf2}], 0x3, &(0x7f0000000440)=""/250, 0xfa}, 0x0, 0x2001, 0xffffffffffffffff, {0x1}}, 0x2) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f00000000c0)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = open_tree(r1, &(0x7f00000005c0)='./file0\x00', 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000100)) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) write$bt_hci(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="0119201cc80001000000000000000008bd91440c3a065e72248fac0db173e423"], 0x20) 17:16:58 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) bind$bt_hci(r1, &(0x7f00000000c0), 0x6) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 17:16:58 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100, &(0x7f0000002640)) 17:16:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:16:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x80087601, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:17:06 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000040)="db766580f0a5e73a99b045ccde29122868e5fee9891a480693a83cf8d979df823b2044aff238f70afac332598332fbb7487ab9ef4f7d2afbebd998c488ddb33e91d4a28241251ed8c34d2d842e6d05421fce5a4da2fe022de94bb95e00e48ad0dd1d1ee76ec16c8069de45328ce4daa4316f362fb8711de399e3be9c") 17:17:06 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 17:17:06 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x227f, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:17:06 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100, &(0x7f0000002640)) 17:17:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 17:17:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x80111500, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:17:06 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/diskstats\x00', 0x0, 0x0) syz_io_uring_setup(0x74a5, &(0x7f0000001ec0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000001f40), &(0x7f0000001f80)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xd66}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48004}, 0x40020d4) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa79094ccd75101d8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffd}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7f}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x20}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x80}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x15}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x4050) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getxattr(0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 17:17:06 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x6000000, 0x0, 0x0}) 17:17:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 17:17:06 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2282, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:17:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x801c581f, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:17:15 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x9000000, 0x0, 0x0}) 17:17:15 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x0, &(0x7f0000002640)) 17:17:15 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000040)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000001c0)) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) dup3(r1, r2, 0x80000) 17:17:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 17:17:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x2, 0x2}, 0x6) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x10000, 0x3f) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xfffe, 0x4}, 0x36) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x6802, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000100)=0x1, 0x4) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x0, 0x77, 0x81, 0x1, "96c25ff35ba3b8c38910478ddfb7f02a315d0b48279087f3c2ce86a531d1d9"}}}, 0x27) r4 = syz_io_uring_complete(0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x2) 17:17:15 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2283, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:17:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="012a04a2568f20ffffff00"], 0xb) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)=ANY=[@ANYBLOB="080000000000000005000000000000000500000008000000070000000000000004000000000000000000000000feffff020000000000000000000000000000000000000000000000000100000000000000000000000000008c84000000000000030000000000000004000000000000000000000000000000000000000000000080030000000000000000000000000000f8ffffffffffffff0000008000000000cffcffd602ffffff0000000000000000000000000000000000280000000000000000000000000000ff0f0000000000000700000000000000020000000000000000000000000000000000000000000000020700000000000000000000000000009d730000000000000700000000000000b5010004000000000000000000000000000000000000000000008032000000000000000000000000000025000000000000001000000000000000ffffff7f00000000000000000000000000000000000000008000000000000000000000000000000004000000000000000100000000000000ffff00000000000000000000000000000080000000000000022200"/426]) 17:17:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x80811501, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:17:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) 17:17:15 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x0, &(0x7f0000002640)) 17:17:15 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 17:17:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 17:17:15 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0xd000000, 0x0, 0x0}) 17:17:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0xc0045878, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:17:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="019ad84c428541f2f72f66696c653000"]) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x1, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/12], 0xc) 17:17:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x6802, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x3, 0x204200) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000100)={0x6, 'veth0_virt_wifi\x00', {0xdde}, 0x9}) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0135049abcec01"], 0x7) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, 0x1) r3 = syz_mount_image$nfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x3, 0x1, &(0x7f0000001280)=[{&(0x7f0000000280)="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", 0x1000, 0x3}], 0x88001, &(0x7f00000012c0)={[{'/e\xe5v/hpet\x00'}, {'veth0_virt_wifi\x00'}, {'/devJhpet\x00'}], [{@obj_user={'obj_user', 0x3d, 'veth0_virt_wifi\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@euid_eq}, {@hash}, {@smackfshat={'smackfshat', 0x3d, '['}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@dont_appraise}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x9d400ddca5686b40, 0xe, 0x63, 0x66, 0x35, 0x63, 0x30, 0x61], 0x2d, [0x32, 0x33, 0x63, 0x33], 0x2d, [0x63, 0x39, 0x62, 0x33], 0x2d, [0x35, 0x36, 0x38, 0x36], 0x2d, [0x37, 0x61, 0x38, 0x65, 0x61, 0x35, 0x32, 0x32]}}}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x480000, 0x40) r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f00000001c0)) r6 = eventfd(0x3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x6802, 0x1) r7 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000001700)) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f00000001c0)) io_submit(0x0, 0x5, &(0x7f00000016c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff, &(0x7f0000000140)="00a788df5bafd0a62c4784f15c529ee684c271c9131b7277214aad41538b85ecd1ddd0beddb051a75ca06c0ca1e1cdf64b2fc6d55c52582fdc915fa4c2309d8bc298c3e0d3f5e28d11a2843c63efced8deae78693c36f58d", 0x58, 0x100, 0x0, 0x7}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x7, 0x1000, r3, &(0x7f00000013c0)="21c68c3eebe66958e589dcec3f9f6fb34898b32625bf077b3c11ec7e2f3c826f78173d96ca763270c8ab68dd693230", 0x2f, 0x7f0, 0x0, 0x0, r4}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x3, 0x1, r5, &(0x7f0000001480)="99642928f70aeace8fbb4b2f9c4fa0a22cc9787050e8c5cfaa27b577f0d838d62979afe25d3837509b1cd0c235abd6204f32fba3bd758bedb78c1956cac6e716ddc8554237d825714b8346632ba84bbeca24402004", 0x55, 0x5, 0x0, 0x1, r6}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000001540)="fc4395b0e5dfd3a1e8913c667287d59ee111e02da8b5155b8f8aecabdf60fe2dbb962953dfb86bc787c62fe3c6e1fb1c6e1909094a5ff6ee6e31516235be9a5f2a5568347822badc6cada6a5e9c5b27836818b79913cb01af01596b55243f3d43e04ccb0a608925ab10b3982c14b016a0ceabed885427bb422a2f935a6507133c3ddd8ba43af2b78d58c0dbfd3e4fb6cf7c6a159ee5df832c80f13a35f3956f4", 0xa0, 0x2, 0x0, 0x3}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0xfc8f278712858592, 0x100, r7, &(0x7f0000001640)="5e59fca5275b", 0x6, 0x8, 0x0, 0x2}]) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000080)=0x7ff, 0x4) 17:17:15 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2284, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:17:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) 17:17:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}) 17:17:23 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0xfffffff, 0x0, 0x0}) 17:17:23 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x2, 0x7ff, "9b0bcb", 0x5, 0x20}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) 17:17:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0xc0045878, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:17:23 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x0, &(0x7f0000002640)) 17:17:23 executing program 4: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000240)={{}, "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"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = accept(r1, &(0x7f0000000040)=@tipc=@id, &(0x7f00000000c0)=0x80) ioctl$sock_bt_hci(r2, 0x800448f9, &(0x7f0000000100)="68c9b7b0dcdf88e16293a30f76cd7180b6e460c4d65428f51cefed8dede19a52b52740d0d5012fb208d9c836485dcfcf824c55c783bcac56d58fda9f5e127c66b7ed71186d50d4888dda034cd25839f440c9dd6cf0f88a1f245409e0e0de5f13e164073fff89bc6755f6a47d8272719f73671722da32dc84dbed0091e9dcbddaf76eaec4014fdc5eaaa45008429273bea2e82ee9dc69b6dc7ccdfd30debecd8df720c51ff4e57ef5e8599684cf29f59ff458362db66281a5168b95a3bbe521711f833b273e72d0fa65e77328a55020ab9507d187fe6d3c88d38c5c40874299411011e5e9a2fa92f5f3e858e200dd40") bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 17:17:23 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:17:23 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$sock_bt_hci(r2, 0x800448eb, &(0x7f0000000240)="02200f21d594854a9e5d29131372f9f5dcd2b0e2f18a185fc067005756b201ab418e4fdcbf426b25f3550815720964fc63c35f9ba7f0bdbfe92a3140bcef5d8f0a5885afd09b1ad3c8323dc35d2380e2521033f72b08bed8caf08fcf95fe9b5afb314502c7f8888d1dd4ee8162c9a33e7fbba9503c4e3dd5d724df7e8a3ba1c515bc8258f47a24de89485d0192b270e372e60c4292649d59c8d8753dfbec6a2a7dd2831e5ebf03f4ad1da8a3a5dc82397aa6e95033a5c110bc759356d72be1e3d1255d05a704e5c7f4ed3624f52b7cdd92f422c8c2fa051e30577b9504aac16fc1b4afea52e375") 17:17:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f00000000c0)={{r0}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000040)={0x0, 0x1, 0xffffffffffffffe9, 0x400, {0x8, 0x70, 0x2, 0x3f, 0xfff}, [0x7]}}, @subvolid=0x20}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 17:17:23 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0xf5ffffff, 0x0, 0x0}) 17:17:23 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0xf, 0x0, 0x4}}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000340)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6, r4}) r6 = fcntl$dupfd(r5, 0x406, r5) getsockopt$inet6_udp_int(r6, 0x11, 0x0, &(0x7f0000001700), &(0x7f0000001740)=0xfffffffffffffdff) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@private1, 0x60, r4}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000004c0)={@ipv4={'\x00', '\xff\xff', @multicast2}, r4}, 0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/58, 0x3a}], 0x1}, 0x10000) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa0, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000893}, 0x20000040) sendmmsg$sock(r0, &(0x7f0000001440)=[{{&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @broadcast}, 0x4, 0x2, 0x4, 0x4}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000100)="3df076b330235b3ba978d6b379ad3a22e3a7325549c3b93dd92baddb9d2e15923b30bace6c06d2ac265b00d7c24596482bbd5a5b59e17eff85a285b466a1ebab7edd1f250215973ee29ce6b6ab6ebb69c49509191a5682645d1b948204d25db30b4270958acb4426e0d05d5a3352cbfe1a342370ae3aacd34e6eb41b9c70011c32ab8ff69b9002acd8c8b35817386f", 0x8f}, {&(0x7f00000001c0)="466442c0de1b43788646f209675c8a8f5c22fd80f1b17d61b4d5249789fbcd3a4131711552d6b7369d8a73da90c44a600bc8defac360944cdcbc0cc54ad3a724afbf84c08cd513f8675e1a32f95d2c165b893c4aea6354dc35492dfc2114f3d4638056be8f", 0x65}, {&(0x7f0000000240)="8aff384dca8be51dd14d698c2dc6ff5b4cf5268a7d8cd081f0693593f06efc36fcea65e006951b8833d87729ca476945e09020d1b654d94ec4b93addf5dad57a862eaccd2329ea5acd559d448c606e0e2163810f87f3b3919491ce13885fe90781a928270c0e6f73721a73d20a8862252c84cf6c55591317f10ff9a9746d458f9f9c075f47e834142eb4abdc46cf6c19bb8e63089b9c774868c8f31d7f908c4b182ab6030708a6e5457482bd8be731923076cdabbb14a5ce5f838a5e2b08c009f38a9b62d602689a2c9e73ca2fb0413dc3566ee77362cbc873b49f", 0xdb}, {&(0x7f0000000340)="a228c3b9f04a6f53c5182bf07babeae5ef1ced28706346e97ae9d78d234408c91af7bab97afd52784dd9b926fe9d08001e0e789685d4699f987985154fabe042204ce8492353119fdeabd350d8ffc62bcf2e5577742fd1977115abf69c512c8629e29af587e6a4c3424045b5b4f087dd971545989abf7a4bae4781e7949901d4e34d41704e0a9fc5e42944c4b52a4f32d7c0bafa576349efb6a2c8bbde2d0fe3b31001c9b2e5ff9089cee65e15cb569ac8456761e29da873a68e6f87", 0xbc}, {&(0x7f0000000400)="cb71f2ce22304eb31979966e6ade8a5b622d7201c399726dcb9daffe60ca0521e903c51535482a5ec7571663e94fce850cd81d6326dd6660f1368b0adbd81f9d7e1ff65860c77004a60e5bbf0e44a23b58845581dbf160dc45b90c7d6eb159c72e5e7662e032d7c0d179d70cd50e14f5852acfccdf5004f91fb38e0a2b3c5074bf37bc99eb701599b400a4426410130c758ffc09f50e6e26b9c38d6b581165d4d923368d6faa6e8dfdadcd9fe84186b580635f2bc8f1a9fa9898a6c09b7344a879b822147ee5654a60697f94ea73c15f012f2f4268facb967047d593", 0xdc}, {&(0x7f0000000500)="994b68d3aa20db5df86478e97b40e5a875792994a0219b6939d8df4e88203b0ba62b144f74132f06c792ce73e40dcc228b4ada93564f31b84266aa0d283c7e67e94569ae1b2aeba580dc3f10ca7232d58d840f2f4ae5a19d8372de49255c93c33bca9c78ba6a86244f95066440b5b71eef0a97db85bc68620c7bef7624b32cc432c8a39c8038dff968822aff81002b3d41f8c18eec2f8beeec659fd85a96343a1db68f1d5a67", 0xa6}, {&(0x7f00000005c0)="61b9df2c7ef6", 0x6}, {&(0x7f0000000600)="fcfb1207d3e378657d7359e1f390cfae9e52b5f9407ec1ecd2ef7de703fb4ac3f5115ffdd3f05807e7855ac22c494fd0781e18a6c54322487151cdbe397b44c68831b89a524f04e2daef95e49554047f4d187966bb0c6a741b1b256b791ed2687abe4a1f50adf46a7a23e01792112f9e5cc38928073f2c7c1824033c10c3e83e415ae70fd3aa5175da4f5b78a6cdf76f971b03a559d17e2790efd2de67cd99c10524a9738d3494377f08cca8a042b8419410f9fcca", 0xb5}, {&(0x7f00000006c0)="41c5a83b28e95d031004da9d08", 0xd}], 0x9, &(0x7f00000007c0)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0x30}}, {{&(0x7f0000000800)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @loopback}, 0x4, 0x0, 0x4, 0x4}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000880)="a24b38ddfecf33847d49c3fa89d2da8dd1ad3e345caa7486f148064401c4ea4eca8e17dc1bdd4c512d06ffa3f51f708fe3240d1c6ae95fa41a50c7f4381034c1029c19ea451fd807548933afa485020857b5d83e4fa2ee492560111a0c3940b3db65af1d35f70e045624bab7bf752a151d61d148b8cc74ff9485305c40f894b5df075b50822d73144fbeadf4b42d77eb94b0cd5a72df664dab4c8d5f3e14b530cfc7eb0eec9d7b226fb73fbd907b8da58d01d4f1d6d2ebc01f264f2ab6e3e9b72f0deabedf845050bd5ae695c56e434fee96fd", 0xd3}, {&(0x7f0000000980)="cface7fdb8a5aa87be9e3fbe144d9b1cf256a972b7306759446746c55fc3267cbc4a5a581bcd72df39a944951051e09bad15fcb7fac4631342f480a93feabc0bb7b1cb52714dd9a8b40b77947731a3e6dd64e21bdbcef50fcc0732313d44c5123649dbe4ff55572a6703484415f4dd4aa0c08fee651faed2ecd46c6b8759dde791c5786be3901fcf1522dc3a1ba975e94a2285c6a13a787d1347f446c5", 0x9d}, {&(0x7f0000000a40)="4cb6341a033553542804bd6f58f3604765bf7c196a308dd01436a513aeadfaa2cb9d78352c9e03d2deb0a454925d85b6fd7b6364cbb48072b8fff634203b303b59baced4b47fb98a9a3c5e70cd4625ba348d46f7ed6e1ef0bbeffcbdb36b", 0x5e}], 0x3}}, {{&(0x7f0000000b00)=@can={0x1d, r8}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000b80)="507c61261d0b507eecd09f8b6ae2b07ca74b317fbaf7c72337cf74f6c1c3d39d23c656c3e84651d1d90cc3b262ee77e3fc76502ae0c19f7342d8ebc77f25f2db481624e7f20616061f4ea790e578ef40539d3da9c194c2ff0a00d085e05b1930b0403c030995f0d12fbb227fc515bf5b544e468492df37594ef91f80f85d0b8e27f95dde70d7ed1904", 0x89}, {&(0x7f0000000c40)="644f535b37ba5e8cebd507a278533c60429a2c7a", 0x14}, {&(0x7f0000000c80)="d8d20866535d5147bdb565ed970bd1a4e2debbc8f6da6d826a13e3cf1185c06ada4623e49808329d41e237909c4cc212da", 0x31}, {&(0x7f0000000cc0)="4a65fce5432079bab2e6a9938ae3a3cd79d1c2c1cc4a1e551a10e204fecd222e9af607f363f322c4154c912ccf2d391dac7b7988f81fb7cc9eb56801d2b6b3e61eb48965829ca6185066251f8dccaef4e0e56b3a7f9d", 0x56}], 0x4, &(0x7f0000000d80)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}, @timestamping={{0x14, 0x1, 0x25, 0x191f}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000e00)="ad667ed8e3dd1575b285404fda301e4a3016426c97cc196f3bb46675e95cd79759e6364213c597c7535505c5ad477dc70f568d4ed5a478cdb4", 0x39}, {&(0x7f0000000e40)="005646f300a15733315d98ad88c464941b5cf75a4fde6bf8cf8c9048263d7359a687357af67255faac96d39ed2a5d391e24c937683625f28d855c03cad6587fa3fa2818262cda9af62e900f2e283d8c5f9749aad6725d942677a9fdba3c3334511e9507f7803eafdf06decf993c1", 0x6e}, {&(0x7f0000000ec0)="cf7a63e2b1314ff2f56acc6c0b098d1f695ded5f23e990a4edba6e794529f55a12550f8c8933a80243311bd6f2e9f5a76d93738213f4596786a211063a6406954b64a0f16a3e5c25b7327205051e", 0x4e}, {&(0x7f0000000f40)="75f870c3d46876e87e33667f3d167c49b603ac3c170828603f3b92bed6be3cabcfa9b4", 0x23}, {&(0x7f0000000f80)="14e3fe992a337b8aacb8d0ce591db9d466da1b5aaf99a6d69fba0b302afdce704b4cf5a2ad75b3adb0d8410e732693337b478180a08fdb6bb46903873fc8cdac4b6dc93a09bb007264a658ba5b518b85aaecd3d6a86795a4c09e6e133c9822bb7c279b45cf8c9de14939c1027bbfd837d65b46df62b970f1ca963eaf12b678357921d92bc678cad6be6526b1c1133064e2fa9fc4cc9c2738859f163818479ec85bc39a4dab28d300688cecc80143f2fb15645794b59c29c1fd8daf97f2c3", 0xbe}, {&(0x7f0000001040)="c5560c085448335aa352d694fbcda74011192df4a907ddd7580d30eb0fc0586d08bb313f2834b9df7c16d9ec9287e9b507144d60a09ce991f6d2ae226408b6bd906211f246a4f572c51151455b2b172539028c65d9275c6f18f3506b09fed70713c7ee9a250f7e1d346761868301c017bb9c01557878509cb912ef75f2fe771090bd3306e0deb69bd2b4349e8234657965dc05ee6f30e9cf3b3db1a091949f4b41b3262cad2d43ec3e667e69cae7f75ff5f44f5a09fa9d37902dc2a3d3f20a946f09cfa3c74e8b4dc1f08d8d7eaf47c1096aff6939d1705df3df1d23170ddcfbb59971699f2d0a8519169a9b7870771d1c0047b3", 0xf4}, {&(0x7f0000001140)="a2e90e4e96aaf254e416573a178d622335983b", 0x13}, {&(0x7f0000001180)="05814b94a0f9cf3b9a5a1dab22cada7ef9be142c0badeed9d256ad52bcf0e21c5fb24ed7d4283c49b653223c6a76fcd5232bd76f768d938995f7fce7055e38550c0bfaeeac3903db3b4c62063994643ab5939dc74a09c6c9dfbda8d3b9e4bbaa66238f3985ccf4b90e84a1932dd7245aec77a896ef0380928ff59a53bcbe2b8dfa27d74fcb50f2dd9e1a616b7c68476540484877fe06386af9dda2a00a97cf5965fb7a669c63bfd384cdfef76f907b383a32435498a2c40eb7ab76799ea0e936066e5115f0a95f7f3302f5", 0xcb}, {&(0x7f0000001280)="555b2afab48b4473ba69ac3616b5ad3b6faf9cb7c9ce8c42d9ff43eea8f42c5332bd33ec9eb961cfd450136c4d63eb8a", 0x30}, {&(0x7f00000012c0)}], 0xa, &(0x7f00000013c0)=[@timestamping={{0x14, 0x1, 0x25, 0x400}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x19}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x55b}}], 0x78}}], 0x4, 0x24008804) r9 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r9, 0x6802, 0x1) setsockopt$bt_BT_VOICE(r9, 0x112, 0xb, &(0x7f0000000040), 0x2) 17:17:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0xc0189436, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:17:23 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, 0x0) 17:17:24 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0xc020660b, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:17:24 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2286, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:17:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd}) 17:17:24 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0xf6ffffff, 0x0, 0x0}) 17:17:24 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0xc0481273, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1731.991127] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1731.992410] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1733.173344] Bluetooth: hci2: command 0x0406 tx timeout [ 1735.220305] Bluetooth: hci2: command 0x0406 tx timeout 17:17:33 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, 0x0) 17:17:33 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0xfdfdffff, 0x0, 0x0}) 17:17:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:17:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}) 17:17:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 17:17:33 executing program 5: fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='user.incfs.size\x00', &(0x7f0000000080)='\xb8%(+\x00', 0x5, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:17:33 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2287, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:17:33 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) 17:17:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:17:33 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, 0x0) 17:17:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x2, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:17:33 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=0x500, 0x4) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x100010, r1, 0x0) 17:17:41 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0xfeffffff, 0x0, 0x0}) 17:17:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 17:17:41 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x6802, 0x1) recvmsg$unix(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000040)=""/120, 0x78}, {&(0x7f00000000c0)=""/147, 0x93}, {&(0x7f0000000180)=""/169, 0xa9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/111, 0x6f}, {&(0x7f00000012c0)=""/4096, 0x1000}], 0x6, &(0x7f0000002340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}, 0xf0f657271ced4dae) fcntl$getown(r1, 0x9) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, 0x1) bind$bt_hci(r2, &(0x7f0000002400)={0x1f, 0x1}, 0x6) 17:17:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x3, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:17:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r2, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r3, 0x0) getresgid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) r5 = getgid() fsetxattr$system_posix_acl(r1, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {0x1, 0x2}, [{0x2, 0x2, 0xee00}, {0x2, 0x2, 0xee00}, {0x2, 0x6}, {0x2, 0x4}, {0x2, 0x3, 0xee01}, {0x2, 0x0, r2}, {0x2, 0x3, r3}], {0x4, 0x4}, [{0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x2, 0xee01}, {0x8, 0x0, r4}, {0x8, 0x0, 0xee00}, {0x8, 0x2, r5}, {0x8, 0x8}], {0x10, 0x7}}, 0x8c, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x6802, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x2, 0x1}, 0x6) 17:17:41 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2288, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:17:41 executing program 7: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2287, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:17:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x20010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2fd7, &(0x7f0000000040)={0x0, 0xd0be, 0x0, 0x3, 0x1cc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x4, 0x4}, 0x6) r3 = dup(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r3, 0x0) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffffffffffffffff}, 0x6) r4 = signalfd4(r3, &(0x7f0000000080)={[0x8]}, 0x8, 0x0) r5 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x14, 0x0, r6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_STATX={0x15, 0x5, 0x0, r4, &(0x7f0000000440), &(0x7f0000000340)='./file1\x00', 0x8, 0x6000, 0x1, {0x0, r6}}, 0xa50) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x2, 0x2004, @fd_index=0x8, 0xfffffffffffffffe, &(0x7f00000001c0)=[{&(0x7f0000000140)="99d1e235171a0721fd7905192dcd54ca2ebf1d6f3cb079ab2007f1c0a6940e4af09752f3342e3d7d5000f4a0e8dde3d680ab33f9a7204794a08d0f8467ca5f3cd42857973a5112cc4cf3d3091b5e98c99dddc9f41b7cec36a732ffca4e95e0b38c73d44127", 0x65}], 0x1, 0x1, 0x3, {0x0, r6}}, 0x1) 17:17:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0xf, 0x0, 0x4}}) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/60, 0x3c}], 0x1}, 0x13cc}, {{&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/70, 0x46}], 0x1, &(0x7f0000000280)=""/7, 0x7}, 0x8}, {{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000340)=""/53, 0x35}, {&(0x7f0000000380)=""/109, 0x6d}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/12, 0xc}, {&(0x7f0000000500)=""/220, 0xdc}, {&(0x7f0000000600)=""/118, 0x76}, {&(0x7f0000000680)=""/202, 0xca}], 0x7, &(0x7f0000000800)=""/69, 0x45}, 0x80000001}, {{&(0x7f0000000880)=@llc, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000000900)=""/131, 0x83}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/187, 0xbb}, {&(0x7f0000001a80)=""/167, 0xa7}, {&(0x7f0000001b40)=""/139, 0x8b}, {&(0x7f0000001c00)=""/159, 0x9f}, {&(0x7f0000001cc0)=""/4096, 0x1000}], 0x7, &(0x7f0000002d40)=""/39, 0x27}, 0x3}], 0x4, 0x20, &(0x7f0000002e80)) 17:17:41 executing program 4: r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x208001, 0xb0882d7f45e3dad8, 0x14}, 0x18) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000000c0)=0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) bind$unix(0xffffffffffffffff, &(0x7f00000015c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = socket$packet(0x11, 0x2, 0x300) stat(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000100)={0x11, 0x1, {0x3, @usage=0x100000000000001f, 0x0, 0xff, 0xfff, 0x93ee, 0x1447, 0x2, 0x11, @usage=0x101, 0x3, 0x7f, [0x4000000000000000, 0x81, 0x7, 0x8001, 0x400, 0x1]}, {0xfff, @struct={0x1f, 0x80}, 0x0, 0xbe, 0x100000000, 0xbbe6, 0x2, 0x58848024, 0x24, @struct={0x8000, 0xf10}, 0x101, 0x80000001, [0x8001, 0x5, 0x23e, 0x1, 0x6, 0x7ff]}, {0x400, @usage=0x400, 0x0, 0xffff, 0x25f, 0x8, 0x3ff, 0x35, 0x1, @struct={0x1ff, 0x2}, 0x46b, 0x3, [0xb8, 0x100000000, 0x80, 0xfffffffffffffffe, 0x6, 0x5]}, {0xffffffffffffff89, 0x6, 0x8}}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000500)={r3, "64eecbf4f9f0c15f5091f44ecdfe13c2"}) 17:17:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 17:17:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x6, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:17:41 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x3, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:17:41 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0xfffffdfd, 0x0, 0x0}) 17:17:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet(0x2, 0x5, 0x12000000) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 17:17:41 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2289, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:17:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010408020004"], 0x6) 17:17:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 17:17:41 executing program 5: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000002d40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x2}}, './file0\x00'}) connect$bt_l2cap(r0, &(0x7f0000002d80)={0x1f, 0xffff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xffff, 0x2}, 0xe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000002d00)={0x0, 0x2, "44acb3", 0x1, 0x4}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r2, &(0x7f0000002c00)=[{{&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f0000000100)=""/92, 0x5c}], 0x2, &(0x7f00000001c0)=""/53, 0x35}, 0x8}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f0000000240)=""/156, 0xfffffffffffffd62}], 0x2, &(0x7f0000000340)=""/177, 0xb1}, 0x3}, {{&(0x7f0000000400)=@isdn, 0x80, &(0x7f0000001980)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/223, 0xdf}, {&(0x7f0000001580)=""/82, 0x52}, {&(0x7f0000001600)=""/122, 0x7a}, {&(0x7f0000001680)=""/198, 0xc6}, {&(0x7f0000001780)=""/120, 0x78}, {&(0x7f0000001800)=""/190, 0xbe}, {&(0x7f00000018c0)=""/147, 0x93}], 0x8, &(0x7f0000001a00)=""/106, 0x6a}, 0x3}, {{&(0x7f0000002e00)=@alg, 0x80, &(0x7f0000002b00)=[{&(0x7f0000001b00)=""/4096, 0x1000}], 0x1, &(0x7f0000002b40)=""/156, 0x9c}, 0x3}], 0x4, 0x0, 0x0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x6802, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000002dc0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="000000000335843a83bf23fd00000000"]) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000001a80)={r2, 0x3, 0x8000, 0x3}) bind$bt_hci(r4, &(0x7f0000001ac0)={0x1f, 0x1, 0x4}, 0x6) [ 1748.884773] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1749.721758] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1750.834960] Bluetooth: hci3: command 0x0406 tx timeout [ 1750.898948] Bluetooth: hci0: command tx timeout 17:17:51 executing program 7: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x227d, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:17:51 executing program 5: ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'veth0_vlan\x00', @local}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:17:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f0000000080)='\v,Sf') setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)={0x77ac, [0x492, 0x1], 0x1}, 0x10) memfd_secret(0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 17:17:51 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x4b47, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:17:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x8, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:17:51 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0xffffff0f, 0x0, 0x0}) 17:17:51 executing program 4: ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000040)="95bc3e54b261db28601e549ff2da9fdc9facdc6cba78177d4c836f443e5e41acd37c57c1d2f48410e22dc514c733eb1c416036bb434e42dc6ac559420425ece4771ba9d662a625c929fee64d54e27b6cd8c80eaf904120bfca6c61ea2d2d9bd6c7c9572aab16d67abebedb5900880cc6ee4f44b51f548db6f6f117cd94b65d0f94452f8bbfd776074af44443e3a429d56c482181dad1") getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8) 17:17:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) 17:17:51 executing program 7: r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=""/165, &(0x7f0000000140)=0xa5) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) getpeername$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, &(0x7f00000001c0)=0x1c) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, 0x1) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:17:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 17:17:51 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x4b49, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:17:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x9, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:17:51 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) 17:17:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000040)="1496b478cf5cb141788b0c347d0d3f516a0d43e9cf15a4ff06ac5ec952a60159a83b020155b95549b6589b1b464fc5e17a231beddeab56327498a8aafd024f2603f353eba48dce5ae34fc208d1801bf3f4b94f6643bde45e0f2dd398e47acb9fb99ab8173363a8961a430e4364bf571e46c67730a207381887b7e98775d3fc12b52fb2614f2a343c326478b41faa790db34e069ca5d546fa7e3ca45f38ccaee128891887033004246e6823767e2d7ec776656ee5b9ee9cd4c3618b27ba0f28bb4d1340b14b2f0a2006f4ec25e001b3d8390258a7d9b8a1") bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffffffffffffffff}, 0x39) 17:17:51 executing program 7: r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=""/165, &(0x7f0000000140)=0xa5) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) getpeername$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, &(0x7f00000001c0)=0x1c) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, 0x1) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:17:51 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0xfffffff5, 0x0, 0x0}) 17:17:51 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x5382, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:17:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0x5, 0x2) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x6) 17:18:01 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0xfffffff6, 0x0, 0x0}) 17:18:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) 17:18:01 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xfffffffe, 0x0}) 17:18:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000001c0)) read(r1, &(0x7f0000000080)=""/4096, 0x1000) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) 17:18:01 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000080)="d55fe1aed954067fe3e7cebf5676d588bd77db7ff0d3811be8b1dcf0fce31e3b7f37ee477cb152b4431f") 17:18:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0xd, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:18:01 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x5385, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:18:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000001c0)) close_range(r1, r0, 0x2) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x88800, 0x0) r4 = dup(r3) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x2}, 0x6) r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f00000001c0)) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000200)={0x0, 0x7, 0xfffd}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000600)={{r0}, 0x0, 0x0, @unused=[0x2, 0xa1d7, 0x5, 0x8], @devid=r7}) close(r2) 17:18:01 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) (fail_nth: 1) 17:18:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}) 17:18:01 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x5386, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:18:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x10, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:18:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) 17:18:01 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x78, 0x0, &(0x7f0000000300)=[@clear_death={0x400c630f, 0x6}, @acquire={0x40046305, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/56, 0x38, 0x0, 0x2c}, @flat=@binder={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/139, 0x8b, 0x1, 0x7}}, &(0x7f00000002c0)={0x0, 0x28, 0x40}}}, @increfs_done, @release={0x40046306, 0x2}], 0x41, 0x0, &(0x7f0000000380)="a3b63587dce081b631d2b844f4b62c0b52391f5f0dad1b5de051ff32a89eed4d1a8c24bf6d4733347aabf1f02c3c2fda42a2dc796d9563ba6fc3d17603a713491f"}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = creat(&(0x7f0000000440)='./file0\x00', 0x105) ioctl$TIOCCBRK(r1, 0x5428) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000004c0)=ANY=[@ANYBLOB="01050000feffffffffffff00e20ce2e4be15984fe26106e83c15cf96b89ed3e900958e4c5cacaaf3e3a617e974efff2245bd83e5416c635c56f76a0eb19454260ebd38f15dec92fd1e9ab1610243a9a67e67db41221f1a4500b671c1fec000000000", @ANYRES32=r0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000480)=0x4) 17:18:01 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0xfffffffe, 0x0, 0x0}) [ 1768.960538] FAULT_INJECTION: forcing a failure. [ 1768.960538] name failslab, interval 1, probability 0, space 0, times 0 [ 1768.962300] CPU: 1 UID: 0 PID: 12066 Comm: syz-executor.7 Not tainted 6.18.0-rc1-next-20251015 #1 PREEMPT(voluntary) [ 1768.962328] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1768.962340] Call Trace: [ 1768.962347] [ 1768.962355] dump_stack_lvl+0xfa/0x120 [ 1768.962392] should_fail_ex+0x4d7/0x5e0 [ 1768.962420] ? getname_flags.part.0+0x48/0x540 [ 1768.962442] should_failslab+0xc2/0x120 [ 1768.962472] kmem_cache_alloc_noprof+0x80/0x690 [ 1768.962495] ? lock_acquire+0x15e/0x2f0 [ 1768.962525] ? getname_flags.part.0+0x48/0x540 [ 1768.962544] getname_flags.part.0+0x48/0x540 [ 1768.962567] getname_flags+0x95/0xe0 [ 1768.962593] __getname_maybe_null+0x69/0x150 [ 1768.962619] __x64_sys_statx+0x103/0x1d0 [ 1768.962645] do_syscall_64+0xbf/0x390 [ 1768.962674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.962695] RIP: 0033:0x7fbc9e8a2b19 [ 1768.962710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1768.962729] RSP: 002b:00007fbc9be18188 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 1768.962749] RAX: ffffffffffffffda RBX: 00007fbc9e9b5f60 RCX: 00007fbc9e8a2b19 [ 1768.962762] RDX: 0000000000001000 RSI: 00000000200000c0 RDI: ffffffffffffffff [ 1768.962774] RBP: 00007fbc9be181d0 R08: 0000000020002640 R09: 0000000000000000 [ 1768.962787] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1768.962799] R13: 00007ffc19efd9ff R14: 00007fbc9be18300 R15: 0000000000022000 [ 1768.962831] 17:18:11 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x541b, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:18:11 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0xffffffff, 0x0, 0x0}) 17:18:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x300, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:18:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd}) 17:18:11 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) 17:18:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:18:11 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) (fail_nth: 2) 17:18:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 17:18:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0xf, 0x0, 0x4}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'virt_wifi0\x00'}) write$bt_hci(r0, &(0x7f0000000040)={0x1, @write_def_err_data_reporting={{0xc5b, 0x1}, {0x81}}}, 0x5) 17:18:11 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) (fail_nth: 3) 17:18:11 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x5421, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:18:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x600, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:18:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xfdff}, 0x6) 17:18:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}) [ 1778.584650] FAULT_INJECTION: forcing a failure. [ 1778.584650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1778.586627] CPU: 0 UID: 0 PID: 12119 Comm: syz-executor.7 Not tainted 6.18.0-rc1-next-20251015 #1 PREEMPT(voluntary) [ 1778.586657] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1778.586670] Call Trace: [ 1778.586678] [ 1778.586685] dump_stack_lvl+0xfa/0x120 [ 1778.586723] should_fail_ex+0x4d7/0x5e0 [ 1778.586754] strncpy_from_user+0x3b/0x2f0 [ 1778.586793] getname_flags.part.0+0x8d/0x540 [ 1778.586827] getname_flags+0x95/0xe0 [ 1778.586856] __getname_maybe_null+0x69/0x150 [ 1778.586886] __x64_sys_statx+0x103/0x1d0 [ 1778.586913] do_syscall_64+0xbf/0x390 [ 1778.586946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1778.586969] RIP: 0033:0x7fbc9e8a2b19 17:18:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)="d460506ff0ada7d6a4d7bf2c6bda7f5dc4f5722cbe1eb6109916d9a1b05e43278cc18e69ec5f70f02018f07e0dce") [ 1778.586986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1778.587007] RSP: 002b:00007fbc9be18188 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 1778.587028] RAX: ffffffffffffffda RBX: 00007fbc9e9b5f60 RCX: 00007fbc9e8a2b19 [ 1778.587043] RDX: 0000000000001000 RSI: 00000000200000c0 RDI: ffffffffffffffff [ 1778.587056] RBP: 00007fbc9be181d0 R08: 0000000020002640 R09: 0000000000000000 [ 1778.587070] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1778.587083] R13: 00007ffc19efd9ff R14: 00007fbc9be18300 R15: 0000000000022000 [ 1778.587111] 17:18:11 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:18:11 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x5450, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:18:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000040)="c6b830c77e4741a74d7638d796483af7d1452121fe") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"8517c8902175e3cd7d1fa7d725543719", 0x0, 0x0, {0x5d, 0x8}, {0x1, 0x6}, 0x1, [0x5, 0x1, 0x7b1c, 0xffffffff, 0x3, 0x9, 0x1, 0x0, 0x36d8, 0x3, 0x2, 0x100, 0xffffffff, 0x8, 0x7, 0x100000000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000180)={"21f76ed19fb2bfd01549937ad1f4d1eb", r1, 0x0, {0x9, 0x7f}, {0x3, 0x7f}, 0x90, [0x3913, 0x9, 0x9, 0x2, 0x1, 0x7, 0x800, 0x4, 0xfffffffffffffffc, 0x6, 0xa8, 0xd3, 0x8, 0x29db, 0x7, 0x3]}) 17:18:11 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) (fail_nth: 4) 17:18:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x900, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:18:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1778.852472] FAULT_INJECTION: forcing a failure. [ 1778.852472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1778.853563] CPU: 1 UID: 0 PID: 12144 Comm: syz-executor.7 Not tainted 6.18.0-rc1-next-20251015 #1 PREEMPT(voluntary) [ 1778.853580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1778.853588] Call Trace: [ 1778.853593] [ 1778.853598] dump_stack_lvl+0xfa/0x120 [ 1778.853624] should_fail_ex+0x4d7/0x5e0 [ 1778.853643] _copy_to_user+0x32/0xd0 [ 1778.853660] simple_read_from_buffer+0xe0/0x180 [ 1778.853677] proc_fail_nth_read+0x18a/0x240 [ 1778.853696] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1778.853714] ? security_file_permission+0x22/0x90 [ 1778.853735] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1778.853752] vfs_read+0x1eb/0xc70 [ 1778.853772] ? __pfx_vfs_read+0x10/0x10 [ 1778.853789] ? lock_release+0xc8/0x290 [ 1778.853807] ? __fget_files+0x20d/0x3b0 [ 1778.853832] ksys_read+0x121/0x240 [ 1778.853848] ? __pfx_ksys_read+0x10/0x10 [ 1778.853873] do_syscall_64+0xbf/0x390 [ 1778.853892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1778.853905] RIP: 0033:0x7fbc9e85569c [ 1778.853914] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1778.853926] RSP: 002b:00007fbc9be18170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1778.853938] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fbc9e85569c [ 1778.853946] RDX: 000000000000000f RSI: 00007fbc9be181e0 RDI: 0000000000000003 [ 1778.853954] RBP: 00007fbc9be181d0 R08: 0000000000000000 R09: 0000000000000000 [ 1778.853961] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1778.853969] R13: 00007ffc19efd9ff R14: 00007fbc9be18300 R15: 0000000000022000 [ 1778.853985] 17:18:20 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0xd00, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:18:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5681e9f642aafaf843bab6d446e6e0a5a4405a032d95c80002"], 0x7) 17:18:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 17:18:20 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x5451, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:18:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x6, 0x4}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x422800, 0x0) write$bt_hci(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="0104fa02c900826034964a3d7a67de42b2e562b814409d20687897e8c7c31e8c8ba2a8b153db4e605623c0e776f38083684b008e2778a6375188440125be8b3345188e5c"], 0x6) 17:18:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0xffffffffffffffff, 0x1, "bb34d9", 0x3a, 0x1f}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:18:20 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:18:20 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x2, 0x0}) 17:18:20 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0xfdfd, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:18:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 17:18:20 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x80000, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:18:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 17:18:20 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x6, 0x0}) 17:18:20 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1002, 0x100, &(0x7f0000002640)) 17:18:20 executing program 5: r0 = socket(0x10, 0xa, 0x1) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:18:20 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x1000000, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:18:29 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x9, 0x0}) 17:18:29 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x102, &(0x7f0000002640)) 17:18:29 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x5452, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:18:29 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x1, 0xff, "eaae36", 0x6, 0xb5}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) 17:18:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) 17:18:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_remove_cig={{0x2065, 0x1}, {0xff}}}, 0x5) 17:18:29 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x2000000, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:18:29 executing program 4: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000300)={0x0, 0x56, &(0x7f0000000280)="5dcf688707093f5907c13af5034872244c03c57ec704527cbf78355d0efa4051990f4acc48bec7a2c55f40fc04e013baf80548fe951a2ae709c2b0053d6dec114280e9dba4ebe12c593e58e15d929b49d761fcd58d28"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_setup(0x5f14, &(0x7f00000000c0)={0x0, 0x3edb, 0x2, 0x0, 0x103}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xf000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000200)) r3 = syz_io_uring_complete(r2) r4 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0x80801) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x6802, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000380)={0x2, 0x0, &(0x7f0000000340)=[r6, r7]}, 0x2) ioctl$sock_bt_hci(r4, 0x800448d7, &(0x7f0000000180)="8e22f52118d49634ba23b2d0fdaf918b7f851284c8d0acbac6a4d5da1e7e269104d398197a4200c2d65dca2e67484f59962b7815a04e706ecf825b9c42d5402ad6adb489") r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x6802, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0x2}, 0x6) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xfffc}, 0x6) 17:18:29 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) creat(&(0x7f0000000040)='./file1\x00', 0x22a) 17:18:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 17:18:29 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xd, 0x0}) 17:18:29 executing program 1: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f00000000c0)={'hsr0\x00', {0x2, 0x0, @loopback}}) ioctl$LOOP_CTL_REMOVE(r0, 0x6802, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0xffffffffffffff91) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000001c0)) dup(r1) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)=0x5, 0x4) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, &(0x7f0000000140)="1081db6262e1d1152bed1a510095169785a5cf2dcac87813a91dc1b749d0f5d1cca087778b9a1beea19d96c22bc4504127d5753b4e9efc17468096fb74b2f6ab812fd075170d928cca7a1347e71a692980016ca29753f216406ed1b55d6e5b1688f1a7b31e32fab849057b29ce064b94805f478c8f42b2e68d9bb0306ff5b325fd2ac53a80aeb7b5dd4b10f28594864433bc4c6cba07d53a5f11c1401d75d609d9df3f213665fe3feac4") 17:18:29 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x3000000, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:18:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsmount(0xffffffffffffffff, 0x1, 0xe) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x40, 0x1}, 0x6) 17:18:39 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x600, 0x0}) 17:18:39 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x6000000, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:18:39 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x5460, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:18:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) 17:18:39 executing program 7: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x6802, 0x1) utimensat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x0, 0xea60}, {0x77359400}}, 0x100) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000000140)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x5fd}], 0x1000, &(0x7f0000010d00)) statx(r1, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, &(0x7f0000002640)) 17:18:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x9, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x12) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000140)="30f655ed205179ea25d0f3a50722bd5f078d23b606a97a90de56bfefe0432b03172a9187f26c60cf362109b95523b33edc7d789d9fbf13c79e1ef989ed474bd7c449ff956396f5c5da72b6ed570f4ddb26ba632153be3ae383b80b5913b9d3a2c0e37a4509eb29dce9240d875f3aa2b2455dca60bcbe54c21d665a8999220c4b6c7549a093c41c281b4df8e69e9304261738df") r1 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x2e, 0xf}, 0x18) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x2}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000100)=0x400, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 17:18:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000100)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x6, "2386efd14dd8403790d14c0f183fd3b0"}}}, 0x1b) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000080)="2e3de6a5f8d8830bd5513e1997e1384bb5a66f99b6a799c4832cfb5ebe6024e4198ae92278de43febc9a9b7db12ae9a73c315c501f16310d9729e8f2c2d7098bc83658bbcd564e362907e408e4cdd8a1ef6048a87be87b30133a9133eda18bcf9a4113d1438fcab723b584d878ebb41c559c4f") 17:18:39 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x3, 0x4, "35c77a", 0x7, 0x20}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x4, 0x1}, 0x6) 17:18:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}) 17:18:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 17:18:39 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x9000000, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:18:39 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) r1 = creat(&(0x7f0000000140)='./file0/file0\x00', 0x161) pwritev2(r1, &(0x7f0000002480)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x1000}, {&(0x7f00000021c0)="cc68b8bf0fc876dfc719444857a935a91ac21042e88bba50f1cfc9dc83a9dd946bb7dfd322", 0x25}, {&(0x7f0000002200)="a2adaeaaa5ed4801bf1959866614a278bc00fbd9717a6913283a5101807f6f93bb09ff59e74c26ce529ccbb89967ff62a496d6e71a4b49c53b08fb3e5d4e561dae85f7345a", 0x45}, {&(0x7f0000002280)="4ddcd56b8449e507ea3eaf4e11fb0e4fedcf222014427a13ffa1e5613e024854dc01ca6f4a5edddf5cb1ec4b71ba6c29ed3af513a568fa08a046976bdde4ab4505b28b58595562e4b1cbdd84f02f4d52df0ee3d0274837b61fc89a182ca6bccf424c6a8cdadde571f4b816f869f8048e45f136761cc059fe87a190f279f9566e3f90c96d162cd2c0adadc57ddd322bdeaa2b42f6eb494bc867fd4dfb32748aeb5e617463b7219e32417010f05da3638853261b8a5e6f7a53ce0b97f11f62d527a307045b66ac232012ad621517f58b04b5ad2c178155be23", 0xd8}, {&(0x7f0000002380)="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", 0xfe}], 0x6, 0x9, 0x7f, 0xc) mkdirat(r1, &(0x7f0000000180)='./file0/file0\x00', 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000002500)=ANY=[@ANYBLOB="f00000001a000100000000000000000020010000000000000000000000000002fe80000000000000000000000000000000000000000000000000000000000000ee39", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00"/168], 0xf0}}, 0x0) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) mkdirat(r0, &(0x7f0000000080)='./file0/file0\x00', 0x97) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f00000001c0)) dup2(r1, r3) 17:18:39 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x40049409, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:18:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd}) 17:18:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0xac9, "6ea4c1", 0x9, 0x4}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 17:18:40 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x900, 0x0}) [ 1807.379359] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1807.398514] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1807.996610] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 1807.999055] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 1809.202980] Bluetooth: hci3: command 0x0406 tx timeout [ 1809.394979] Bluetooth: hci0: command tx timeout [ 1811.250942] Bluetooth: hci3: command 0x0406 tx timeout 17:18:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0xd000000, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:18:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 17:18:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x0, 0x7, "432ebb", 0x5, 0x8}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 17:18:51 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[@ANYBLOB="12"]) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xa48005, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}, {@access_user}], [{@seclabel}, {@audit}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}}) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:18:51 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x40086602, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:18:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x4, 0x3}, 0x6) 17:18:51 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xd00, 0x0}) 17:18:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x39e6}}}, 0x8) 17:18:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x10000000, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:18:51 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) faccessat(r0, &(0x7f0000000040)='./file0\x00', 0x202) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:18:51 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) write$bt_hci(r1, &(0x7f0000000040)={0x1, @write_link_policy={{0x80d, 0x4}, {0xc8, 0x9d}}}, 0x8) ioctl$LOOP_CTL_REMOVE(r0, 0x6802, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0xfffffffffffffffd}, 0x6) 17:18:51 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x40087602, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:18:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 17:19:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x400540) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0x0, 0xffff, "21db6f", 0xe0, 0x20}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) 17:19:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0xf5ffffff, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:19:01 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x401c5820, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:19:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pidfd_getfd(0xffffffffffffffff, r0, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x2a) 17:19:01 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xfdfd, 0x0}) 17:19:01 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000140)=""/165, 0xa5}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x41) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:19:01 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x311002, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, 0x1) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @le_read_iso_tx_sync={{0x2061, 0x2}, {0xc9}}}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @host_buffer_size={{0xc33, 0x7}, {0x0, 0xff, 0x9}}}, 0xb) 17:19:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 17:19:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}) 17:19:01 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x254, r0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_BEARER={0x120, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8f31}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xe83, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1000}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x314}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @local, 0xfffffff7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x561}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffc00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb5b}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc3}]}]}, 0x254}}, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) r2 = creat(&(0x7f0000002100)='./file0\x00', 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), r2) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4, 0x2}, 0x6) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x60000010}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x401}, @NL80211_ATTR_NOACK_MAP={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004080}, 0x4004) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f00000001c0)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001f80)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000640)=""/101, 0x65}, {&(0x7f00000006c0)=""/114, 0x72}, {&(0x7f0000000740)=""/79, 0x4f}], 0x3, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000900)=""/75, 0x4b}, {&(0x7f0000000980)=""/22, 0x16}, {&(0x7f00000009c0)=""/184, 0xb8}], 0x3, &(0x7f0000000ac0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000000b80), 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000000c00)=""/163, 0xa3}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/252, 0xfc}, {&(0x7f0000001dc0)=""/22, 0x16}, {&(0x7f0000001e00)=""/183, 0xb7}], 0x5, &(0x7f0000002080)=ANY=[@ANYBLOB="1c000000000000000100000002000000da39706456ba2f5aba3a89f2a7f165b11692901a0539902848a53ebb1471c89b8a881bc0b5475f53dcd494076230", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32], 0x40}}], 0x3, 0x10000, &(0x7f0000002040)={0x77359400}) ioctl$SNAPSHOT_S2RAM(r4, 0x330b) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000040)={0x1, 0x5, 0x2}) 17:19:01 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x4020940d, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:19:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0xf6ffffff, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:19:01 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fgetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.redirect\x00', &(0x7f0000000080)=""/220, 0xdc) 17:19:01 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[@ANYBLOB='\x00']) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:19:01 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x1000000, 0x0}) 17:19:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}) 17:19:09 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) write$bt_hci(r1, &(0x7f0000000040)={0x1, @write_link_policy={{0x80d, 0x4}, {0xc8, 0x9d}}}, 0x8) ioctl$LOOP_CTL_REMOVE(r0, 0x6802, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0xfffffffffffffffd}, 0x6) 17:19:09 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x2000000, 0x0}) 17:19:09 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x80086601, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:19:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0xfcffffff, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:19:09 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000340)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6, r0}) r2 = fcntl$dupfd(r1, 0x0, r1) getsockopt$inet6_udp_int(r2, 0x11, 0x0, &(0x7f0000001700), &(0x7f0000001740)=0xfffffffffffffdff) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private1, 0x60, r0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000004c0)={@ipv4={'\x00', '\xff\xff', @multicast2}, r0}, 0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/58, 0x3a}], 0x1}, 0x10000) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa0, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000893}, 0x20000040) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c4}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="0bd9360c", @ANYRESDEC, @ANYBLOB="0103100000000000000067"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r6, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x401}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r8, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_INO_PATHS(r8, 0xc0389423, &(0x7f0000000080)={0x7, 0x8, [0x6, 0x2, 0x7f, 0x480000000], &(0x7f0000000040)=[0x0]}) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) 17:19:09 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00ff80b5a9d2ce5e9c9e2286bb71d5b99408fd8beaf7108237e6a22ee1b41c000000000000"]) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x6000) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:19:09 executing program 5: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000001c0)) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2000, &(0x7f0000000200)=ANY=[@ANYBLOB='mode=000000000\x00\x00000000000000,\x00', @ANYRES32, @ANYRES32=r0, @ANYRESDEC, @ANYBLOB="9b4a845205ae09328065da490362bc70a8131e4b9cfeb919badfa20c79d11f4556d1d68026ad07cdf971b87563e25172a953e8c84a3db65952160f1633c7a5c7f5c5bf456f93da9801f04582dcf74a5a650c775aba0e52a7794cbccc40b00b37e62dc08528f6322ecd1219c132aa0bba9a2632436331a5a31ed45d3e47e14e2817b16a3f0663b103072be60ddcde1bb277e42072ffd11e8ffd4907fd6c407cb7c885b433bb0763687a2af66a1b8304326323f5d17c0387e7fd7a719088926710ca38772e1f40fcfada1548b7e74c48e5c60c41e5f8a51b161a14aa3fa6f313e07b0654d96ec457"]) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:19:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff}) 17:19:09 executing program 5: ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000040)="743e9eaf57ccc31e04d72fd0b9811d51a9bb7fc9414ffff59625b9aedf3e331570b4c377071c14f237120ef263bdb03f715934987401ac0a391add7095e4aa0d60b40740b7b097e6124b46002dc7fbcc8ef6dc1621fce6d097a262991ce50e243e1ff8b343963e11ae589adac22cb2c0cd3561b4d1b5df8664b1a156e88fdaddb596160a06b2e7c35eb00615efcfa7139a945341e9dc2595d62e2115384f8c6b3e9073bb3fffbf8fd757ffd3009518eb2f76e980a32e30f09956d9484444ecf12ccd62a461603791bf5c8caf6a835277640cd5ebe8ba6954fcde1b1181f21148e198b26b93dc1af8c88e38a905c70e94e199c2b99da2da010c6e13451127b9f4") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6) 17:19:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0xfdfd0000, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:19:09 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r0 = epoll_create1(0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040)="7489ca11bf267461e24beb0d6d84773cc1d11f0123ec730a13907b4876b9059c04139ba509b512a9bfc6bae86fe3013e3c401cb5b3537a1786793c57130d5a36b455b3a131c1a560ea81ca557a750dd655f988e0e9084ca7ff8b4c549b1db73c87c55311391720675531c56a754dd65d39c72da88268c4cb30e287a1bea27a004f46c64955f8483abee072d433b78f0da69e193fdf47441b6dd001a3f26d8e373d319bdfeef53b973803b88a9c6cd46ad363c62cd008285120b30db695", 0xbd, r0}, 0x68) 17:19:09 executing program 7: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x6802, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x2f, 0x7f, 0x80, 0x0, 0x10, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x1, 0x1, 0x1000}}) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00') 17:19:09 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) (fail_nth: 1) 17:19:09 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x80087601, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:19:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}) 17:19:09 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x6000000, 0x0}) [ 1837.066174] FAULT_INJECTION: forcing a failure. [ 1837.066174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1837.068199] CPU: 1 UID: 0 PID: 12442 Comm: syz-executor.4 Not tainted 6.18.0-rc1-next-20251015 #1 PREEMPT(voluntary) [ 1837.068232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1837.068247] Call Trace: [ 1837.068255] [ 1837.068265] dump_stack_lvl+0xfa/0x120 [ 1837.068306] should_fail_ex+0x4d7/0x5e0 [ 1837.068340] _copy_from_user+0x30/0xd0 [ 1837.068374] move_addr_to_kernel.part.0+0x40/0x120 [ 1837.068418] __sys_bind+0x14b/0x2b0 [ 1837.068445] ? __pfx___sys_bind+0x10/0x10 [ 1837.068478] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1837.068506] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1837.068535] ? ksys_write+0x1a3/0x240 [ 1837.068569] ? __pfx_ksys_write+0x10/0x10 [ 1837.068609] __x64_sys_bind+0x73/0xb0 [ 1837.068635] do_syscall_64+0xbf/0x390 [ 1837.068672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1837.068698] RIP: 0033:0x7f1bd84fbb19 [ 1837.068716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1837.068739] RSP: 002b:00007f1bd5a71188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1837.068764] RAX: ffffffffffffffda RBX: 00007f1bd860ef60 RCX: 00007f1bd84fbb19 [ 1837.068795] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 [ 1837.068809] RBP: 00007f1bd5a711d0 R08: 0000000000000000 R09: 0000000000000000 [ 1837.068830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1837.068845] R13: 00007ffd302b18cf R14: 00007f1bd5a71300 R15: 0000000000022000 [ 1837.068877] 17:19:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) (fail_nth: 2) 17:19:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff}) 17:19:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0xfdfdffff, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:19:19 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x7fff, 0x8000) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x1, 0xa, 0x1f, 0x5, 0x0, 0x6, 0x10, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x4, 0x9}, 0x9400, 0xffffffff, 0x6, 0x2, 0x8, 0x1f, 0xaf, 0x0, 0x4, 0x0, 0x2}, r0, 0xc, r1, 0x9) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x3}, 0x6) 17:19:19 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setgid(r3) lsetxattr$security_ima(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000380)=@v1={0x2, "9e635d9e58"}, 0x6, 0x3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0f0200010000f9abbd1f6ecee70f2200"]}) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001c00080025bd7000fbdbdf256c28001a00fe8000000000000000000000000000bbfc010000000000000000000000000001020024010a0010000100000000000005000000f18fe2417d064083b281d2cb9b93d37d76bd090ad972f3ef14ca84cfbc351fe74594e1ae99362cf84ca29aadf4c0f9463da04b08d232c55080038ae586adc177"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40000) chown(&(0x7f0000000040)='./file0\x00', r1, r3) statx(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x100, &(0x7f0000002640)) 17:19:19 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x9000000, 0x0}) 17:19:19 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x80111500, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:19:19 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @remote_name_req_cancel={{0x41a, 0x6}, {@none}}}, 0xa) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2, 0x4}, 0x6) [ 1846.751910] FAULT_INJECTION: forcing a failure. [ 1846.751910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1846.753936] CPU: 1 UID: 0 PID: 12460 Comm: syz-executor.4 Not tainted 6.18.0-rc1-next-20251015 #1 PREEMPT(voluntary) [ 1846.753970] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1846.753984] Call Trace: [ 1846.753992] [ 1846.754001] dump_stack_lvl+0xfa/0x120 [ 1846.754043] should_fail_ex+0x4d7/0x5e0 [ 1846.754078] _copy_to_user+0x32/0xd0 [ 1846.754112] simple_read_from_buffer+0xe0/0x180 [ 1846.754144] proc_fail_nth_read+0x18a/0x240 [ 1846.754182] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1846.754219] ? security_file_permission+0x22/0x90 [ 1846.754257] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1846.754293] vfs_read+0x1eb/0xc70 [ 1846.754332] ? __pfx_vfs_read+0x10/0x10 [ 1846.754367] ? lock_release+0xc8/0x290 [ 1846.754401] ? __fget_files+0x20d/0x3b0 [ 1846.754443] ksys_read+0x121/0x240 [ 1846.754476] ? __pfx_ksys_read+0x10/0x10 [ 1846.754518] do_syscall_64+0xbf/0x390 [ 1846.754556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1846.754582] RIP: 0033:0x7f1bd84ae69c [ 1846.754600] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1846.754624] RSP: 002b:00007f1bd5a71170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1846.754648] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f1bd84ae69c [ 1846.754665] RDX: 000000000000000f RSI: 00007f1bd5a711e0 RDI: 0000000000000003 [ 1846.754679] RBP: 00007f1bd5a711d0 R08: 0000000000000000 R09: 0000000000000000 [ 1846.754694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1846.754709] R13: 00007ffd302b18cf R14: 00007f1bd5a71300 R15: 0000000000022000 [ 1846.754742] 17:19:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0xfeffffff, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:19:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:19:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 17:19:19 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) clock_gettime(0x0, &(0x7f00000074c0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000001580)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/173, 0xad}, {&(0x7f0000001180)=""/170, 0xaa}, {&(0x7f0000001240)=""/56, 0x38}, {&(0x7f0000001280)=""/230, 0xe6}, {&(0x7f0000001380)}, {&(0x7f00000013c0)=""/241, 0xf1}, {&(0x7f00000014c0)=""/173, 0xad}], 0x8, &(0x7f0000001600)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000001780)=""/201, 0xc9}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/218, 0xda}, {&(0x7f0000002980)=""/23, 0x17}, {&(0x7f00000029c0)=""/44, 0x2c}, {&(0x7f0000002a00)=""/46, 0x2e}], 0x6, &(0x7f0000002ac0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002b00)=""/70, 0x46}, {&(0x7f0000002b80)=""/56, 0x38}, {&(0x7f0000002bc0)=""/251, 0xfb}], 0x3, &(0x7f0000002d00)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}, {{&(0x7f0000002e40)=@abs, 0x6e, &(0x7f00000031c0)=[{&(0x7f0000002ec0)=""/119, 0x77}, {&(0x7f0000002f40)=""/34, 0x22}, {&(0x7f0000002f80)=""/129, 0x81}, {&(0x7f0000003040)=""/159, 0x9f}, {&(0x7f0000003100)=""/13, 0xd}, {&(0x7f0000003140)=""/97, 0x61}], 0x6, &(0x7f0000003240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000003300)=@abs, 0x6e, &(0x7f0000004880)=[{&(0x7f0000003380)=""/246, 0xf6}, {&(0x7f0000003480)=""/17, 0x11}, {&(0x7f00000034c0)=""/39, 0x27}, {&(0x7f0000003500)=""/154, 0x9a}, {&(0x7f00000035c0)=""/56, 0x38}, {&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f0000004600)=""/250, 0xfa}, {&(0x7f0000004700)=""/68, 0x44}, {&(0x7f0000004780)=""/227, 0xe3}], 0x9, &(0x7f0000004940)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{0x0, 0x0, &(0x7f0000005d00)=[{&(0x7f0000004a80)=""/6, 0x6}, {&(0x7f0000004ac0)=""/195, 0xc3}, {&(0x7f0000004bc0)=""/249, 0xf9}, {&(0x7f0000004cc0)=""/2, 0x2}, {&(0x7f0000004d00)=""/4096, 0x1000}], 0x5, &(0x7f0000005d80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000005e00)=@abs, 0x6e, &(0x7f0000007200)=[{&(0x7f0000005e80)=""/242, 0xf2}, {&(0x7f0000005f80)=""/86, 0x56}, {&(0x7f0000006000)=""/211, 0xd3}, {&(0x7f0000006100)=""/4096, 0x1000}, {&(0x7f0000007100)=""/219, 0xdb}], 0x5, &(0x7f0000007280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}], 0x7, 0x2121, &(0x7f0000007500)={r1, r2+60000000}) write$bt_hci(r3, &(0x7f0000007540)={0x1, @le_set_scan_enable={{0x200c, 0x2}, {0x45}}}, 0x6) 17:19:19 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000001c0)) dup(r1) 17:19:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x3, 0x4}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) 17:19:19 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xd000000, 0x0}) 17:19:19 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x801c581f, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:19:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/70, 0x46}, {&(0x7f00000000c0)=""/48, 0x30}, {&(0x7f0000000100)=""/130, 0x82}, {&(0x7f00000001c0)=""/167, 0xa7}, {&(0x7f0000000280)=""/220, 0xdc}, {&(0x7f0000000380)=""/167, 0xa7}, {&(0x7f0000000440)=""/14, 0xe}], 0x7, &(0x7f0000001d80)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000001d00), 0x6e, &(0x7f00000019c0)=[{&(0x7f0000000680)=""/236, 0xec}, {&(0x7f0000000780)}, {&(0x7f0000000600)=""/13, 0xd}, {&(0x7f0000000800)}, {&(0x7f0000000840)=""/94, 0x5e}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/104, 0x68}, {&(0x7f0000001940)=""/95, 0x5f}], 0x8, &(0x7f0000001a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138}}], 0x2, 0x0, &(0x7f0000001c00)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448eb, &(0x7f0000001c40)="d84b235f20657df4dbd6b24b46fa0dae0587ea42e1b3242a6513cb") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:19:19 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x400, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r0, {r1, r2}}, './file0\x00'}) syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2, 0x3, &(0x7f0000001240)=[{&(0x7f0000000240)="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", 0x1000, 0x20}, {&(0x7f0000000140)="c3749a7b7fe110dd83c3ec89eadba73d88d018e5eb969eca929f5305bfb49c2f436fc743cd0baa9828927244103237862ba515a115ca117439575681b73fc7de9df1a961868607819f7a3b870ab6a7145dd94645de8e1c839b2906", 0x5b, 0x80000001}, {&(0x7f00000001c0)="6172c3488ccc8c69f878338ca2891638db83715c17dafc21", 0x18, 0xa97}], 0x810002, &(0x7f0000001300)={[{'vfat\x00'}, {'vfat\x00'}, {'vfat\x00'}, {'vfat\x00'}, {'vfat\x00'}, {'vfat\x00'}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@uid_eq={'uid', 0x3d, r3}}, {@fsmagic={'fsmagic', 0x3d, 0xb1}}, {@audit}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vfat\x00'}}, {@hash}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@euid_lt={'euid<', r1}}, {@fsname}]}) 17:19:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}) 17:19:28 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0xffefffff, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:19:28 executing program 7: membarrier(0x2, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) membarrier(0x1, 0x0) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x402000, 0x0) 17:19:28 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:19:28 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xfffffff, 0x0}) 17:19:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 17:19:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x101, "f221a9", 0x5, 0x80}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:19:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000001c0)) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000080)={&(0x7f0000000040)=""/32, 0x20}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000200)={0x1e, 0x0, {0x94, @usage=0xbb, 0x0, 0x1, 0x8, 0x80, 0x100, 0x7fff, 0x0, @struct={0x7b, 0x6}, 0x6, 0x7, [0x378, 0x5, 0x2, 0x3, 0x2, 0xd949]}, {0x9, @struct={0x94a4, 0x7}, 0x0, 0x51, 0x80, 0x0, 0x8000, 0x5211, 0x4a5, @struct={0x3, 0x3}, 0x0, 0x3f, [0x8, 0x3, 0xffffffffffff600f, 0x9c70, 0x7, 0xfff]}, {0xe, @usage=0x3, 0x0, 0xe0d, 0x1, 0x5, 0x40, 0xff, 0x10, @usage=0x4, 0x1ff, 0x2, [0x2, 0x6, 0x9, 0x4, 0x10001, 0x8]}, {0x80000000, 0x20, 0xff}}) 17:19:28 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x80811501, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1856.324574] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1856.338165] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1858.354966] Bluetooth: hci0: command tx timeout 17:19:38 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xf5ffffff, 0x0}) 17:19:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff0f}) 17:19:38 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0xffffefff, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:19:38 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f0000000080)="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") r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000300)={0x2, 0x0, 0xa0000, {r2}}, 0x20) close_range(r2, r0, 0x2) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x1}, 0x6) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000003c0)=ANY=[@ANYBLOB="007cb01cd1694850bf26ccc298ea8f08b1ec1d3ab07f25bd6e4414194a5352509134ebf247dd7acd3132a0e99de09ef1ea2f91e273dfdd67dfde45dc3488d489dd04587d209f43c103735db434df462f0bb505e1d9920286bb7132081a10a207e64cab0e55ed8192a5473e65b8", @ANYRES32=r1, @ANYBLOB="00000000000000002e2f66696c653000654dfa2395df9e779b2cec892025209b89230f285fcfa166bd2ff9f882a5e431e08ae9f677568dec38a45dda8f2f8494698c7c023705fa"]) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000200)={0x1, 0xcc, "f26d14b0d44af1ddaed9c2f16eb591fee07ee5af1a7276e533683b8754b499103e7b5e181bf7c0ccc89e43f1dd7caa6565dbfaa21bfad8fc95308012d91ad963327f853d51e4620abadb9ca9f125ac6fc71c25d512f2a1f4a4b9aa0a1ae560cff50072138d909f2da6899683978a78cc0d200059c824f138e35c1564ac1ea4849d067f1429b6b29a743a3b4c2ac651c44a02e549995d7a3c1a79f699c8fb04628fdc5cfe69977e6f4c4897c663efe10ab355ddfa8e2bc66778f8e717f5c8c194b962838c88dc49f3bf89e93d"}) 17:19:38 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0xc0045878, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:19:38 executing program 4: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000001c0)) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:19:38 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000001c0)) fcntl$setstatus(r1, 0x4, 0x6000) 17:19:38 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000009c0), 0x3, 0x2041, &(0x7f0000001440)={r2, r3+60000000}) close_range(r1, 0xffffffffffffffff, 0x2) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) 17:19:38 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x6802, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x83, 0x4}, 0x6) 17:19:38 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000000000000638a00000000000087280ded7ebb83abfbee7bca5f4e82f8b9db5e5a05f9dacf05b9db1513f478481a6b2c285c58a212c881aabd5d1e51011d4775c21d0c3ba531d08c5334e5342ec1bce9c2c72b709e5034c7321ea5417d9647661086f234c435b66e3dd8233924ec7c31d5f1eb169702959f0c4e9f9d2960a4821796072fc0ff4683d344000000000000"]}) connect(r1, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x2711}, 0x80) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) 17:19:38 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xf6ffffff, 0x0}) 17:19:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}) 17:19:38 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0xfffffdfd, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:19:38 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, 0x1) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000180)={0x42c, 0x3f4, 0x200, 0x70bd2d, 0x25dfdbff, {0x5, 0x1, 0x4, [0x9f0, 0x4, 0x5, 0x8001, 0x401, 0x8, 0x558, 0x2, 0x60, 0x80000000, 0x2, 0x1000, 0x51fd, 0x200, 0x7fff, 0x15, 0x5, 0x6f, 0xffff, 0x3f, 0x81, 0x3, 0x80000000, 0x7ff, 0x20, 0x3, 0x8, 0x2, 0x3, 0x18, 0x1, 0x400, 0x2, 0x7fc, 0x1000, 0xfff, 0x8e64, 0xa8000000, 0x4, 0x7f, 0xe0000, 0x4, 0x6, 0x9, 0x9, 0x5, 0x9, 0x9, 0x9, 0xc3, 0x20, 0x9, 0xfffffffe, 0x81, 0x629ab8ad, 0x10001, 0x2, 0x355d54f9, 0x8000, 0x52a, 0x1, 0x8001, 0x4, 0x1b], [0x4, 0x5, 0x3, 0x3ff, 0xf0000000, 0x6, 0x2, 0x800, 0x4, 0x1, 0x4, 0x5, 0x1, 0x8001, 0x3, 0x9, 0x3f, 0xae, 0x1f, 0x2, 0x7fffffff, 0xff, 0x401, 0x9, 0x40e, 0xfffffff9, 0x6, 0x5, 0xbf, 0xfffeffff, 0x949, 0x36a, 0x0, 0x3, 0x9, 0x7f, 0x6, 0x63a1, 0x3, 0x3, 0x5, 0x1, 0x4, 0x7a8, 0x0, 0x7, 0x800, 0x5, 0x15f, 0x4, 0x1, 0xffff, 0x6, 0x8, 0x9, 0x800, 0x1, 0x401, 0x20, 0x2, 0xd20, 0x80, 0x3, 0x2c4], [0x0, 0x101, 0x40, 0x4, 0x100, 0x1, 0x8, 0x7, 0x40000000, 0x7, 0x3, 0x8, 0x3f, 0x0, 0x4, 0x5, 0x1, 0x8000, 0x2, 0x8d, 0x3, 0x700000, 0x1, 0xfffffff7, 0x42, 0x3f, 0x1, 0x8, 0x7, 0xfffffff8, 0x2, 0x9, 0x7, 0x9, 0x5, 0x1, 0x101, 0x7fff, 0x1ff, 0x1f, 0x2, 0x401, 0x7fff, 0x2b64, 0x10000, 0x7, 0xecd, 0x7, 0x8, 0x400, 0x401, 0x0, 0x7, 0x7ff, 0x4, 0x7, 0x2, 0x1, 0x7, 0x1, 0x1, 0x746f, 0xfff, 0x4], [0x7f, 0x3, 0x7, 0x800, 0xffff0000, 0xfffffffa, 0x3f, 0x4, 0x8, 0x4, 0x6, 0x8, 0xf4, 0x9a, 0x0, 0x100, 0x2, 0x0, 0xfffffe01, 0x922, 0x4, 0x9, 0x2, 0x3, 0x5, 0x5, 0x0, 0x2, 0x3, 0x9, 0x1, 0x10000, 0x2, 0x9, 0x3dd, 0x7fffffff, 0x0, 0x3, 0x1, 0x7fffffff, 0x3f, 0x9, 0x9, 0x27000000, 0x3, 0x9, 0x1000, 0x5, 0x8001, 0x7, 0x4, 0xd, 0x9, 0x4, 0x3, 0x40, 0xff, 0x3, 0x11e9415f, 0x7ff, 0x3, 0x3f, 0x5, 0x9], 0xb, ['/dev/hpet\x00', '\x00']}, ["", "", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x44840}, 0x4c814) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) flock(r1, 0x4) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000100)="77443d44fcb9c52990b6e60692111b7262a40dd9c48e0a40cd523d4abc9b917cdf391f0ca9b4fa0b125140ae4b781b58d45eda") ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000040)="f3540c38e8be0f7f5a54595af46f295c536b534883e6e78e359e987893cce29cc66952bf319545a1aa480037d21233acd997b815c60441870c303cade0425aefb8d4057c3369599719bdff6cf82b918ddf8223b989edf9995f8009c0028c4b7da4a2ed7849b9867e2869c2d026debf741518ed029d3f5a132e531bb8e2da6a8482855c8312586eee1329753baac71ce1ba987b") 17:19:38 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) write$bt_hci(r0, &(0x7f0000000040)={0x1, @accept_logical_link={{0x439, 0x21}, {0xc8, {0x3, 0xff, 0x7e28, 0x0, 0x7, 0xe3}, {0x0, 0x1, 0x5, 0x9, 0x81d, 0x3}}}}, 0x25) 17:19:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x6802, 0x1) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000000240)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, 0x1) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) 17:19:38 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0xc0045878, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:19:38 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xfdfdffff, 0x0}) 17:19:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) fcntl$setsig(r0, 0xa, 0x6) 17:19:38 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) futimesat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{0x77359400}, {0x77359400}}) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x400, 0x0) r2 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x408000, 0x40) dup(r2) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:19:38 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x800, 0x10a, 0x2}, 0x18) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @write_voice_setting={{0xc26, 0x2}, {0x8}}}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) syz_open_dev$vcsa(&(0x7f0000000100), 0x3, 0x8100) 17:19:38 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0xfffffff5, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:19:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}) 17:19:38 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0xc0189436, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:19:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) 17:19:47 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0xc020660b, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:19:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) ioctl$sock_bt_hci(r1, 0x400448e2, &(0x7f0000000040)="ba88bd9371f0dd5ce72531fd3d52c30df3a567f4a25110f832cbd3057b00a9ae6e3288381ad031f6fd81034eb26fafa4702f790f878bf6a10e81bbee617db406c7d453a82d169750439b9259aadb738d629948c6d8285c5c34f8021c0b25e1f51044fd9af35499d5863be544a17c467de37d5083ddd733caf5926d394b771b1974d388bf45e7435f2df8f377d7bac675254e3b0cce6d1e0c29925691e7e70c151698dc01054219a7434e8f58c08f0c4dda5a8dde20ea41e699f21a03ce9ba7363fc23972ff4dad89a270bbc11df1") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:19:47 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xfeffffff, 0x0}) 17:19:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0xfffffff6, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:19:47 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x800, 0x56}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x829f}]}, 0x28}, 0x1, 0x0, 0x0, 0x404c011}, 0x40805) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)="a88ff16873a016e61ea47efcebe4258c2fe82458a0b52b5a7087a475ef3752a4707f98c2777a8287a4f7711a82cca17486745ded94ca93973219713c6f4ac54399500b676f3234b308171d53992773e3d317c6297dde4922163f719d9fe8e6fac343dce3e80a1fd934dc5d4a0f37aa22083d47611a9acfa5d562f55f47f80e494d29228d11f280fbf92b1d7558cd20fa3de3772e32366d08f4c7e586e8eb8fae471921") r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, 0x1) write$bt_hci(r2, &(0x7f0000000100)={0x1, @le_set_ext_adv_enable={{0x2039, 0x40}, {0x8, 0x4, "541ee8b7c10347a4e099dc11ce53f35047edad9eb9e74345587ceaa046443b057df9f3954c79f36e4051fc3eef0acb822a72745972d9e94bda00845cdfab"}}}, 0x44) 17:19:47 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x1, 0x50, 0x1c}, 0x18) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:19:47 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="01049001f8"], 0x5) 17:19:47 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000340)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6, r3}) r5 = fcntl$dupfd(r4, 0x0, r4) getsockopt$inet6_udp_int(r5, 0x11, 0x0, &(0x7f0000001700), &(0x7f0000001740)=0xfffffffffffffdff) r6 = fcntl$dupfd(r5, 0x406, r5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@private1, 0x60, r3}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000004c0)={@ipv4={'\x00', '\xff\xff', @multicast2}, r3}, 0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/58, 0x3a}], 0x1}, 0x10000) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa0, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000893}, 0x20000040) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@loopback, 0x4e22, 0x5, 0x4e20, 0x0, 0x0, 0x100, 0x40, 0x2c, r3, 0xee00}, {0x9, 0x1f, 0x2, 0x75248c81, 0x1, 0x8, 0x2f4a, 0x41}, {0x4, 0x9e9, 0x69, 0x7}, 0x4, 0x6e6bb7, 0x1, 0x0, 0x2}, {{@in=@loopback, 0x4d2, 0x2b}, 0x2, @in6=@remote, 0x0, 0x0, 0x2, 0xb, 0x4, 0x800, 0x40}}, 0xe8) r9 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r9, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:19:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) 17:19:47 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xfffffdfd, 0x0}) 17:19:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:19:56 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xffffff0f, 0x0}) 17:19:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) 17:19:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:19:56 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0xc0481273, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:19:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = dup2(r1, r0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x49) r3 = dup(r1) bind$bt_hci(r0, &(0x7f0000000a40)={0x1f, 0xffffffffffffffff}, 0x6) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder-control\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) r6 = syz_open_dev$usbmon(&(0x7f0000000880), 0x52, 0x98a40) io_submit(0x0, 0x8, &(0x7f0000000a00)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x5b26, r0, &(0x7f0000000040)="cff81643d56c7b59fa7803e7e5c7b614dc1b25c004f9c16e5f3ce6069f7b9a5d1b44869bcabec46dcbe65ec51ad607a4a4dc7e34f7e34cfd3577fd3cd1629056b69315ce5ac7d2351ca7b6bca74570001b93afa7b74e5d28b96c727334d81153a958286a6a25533861309e190b6b7d634bed4f3c8fb6b5bd4f90153dff070f9b55c06eca87bf83cbe5d68dfe4a117cf83b5ddf2f12c5aba4ac1a23a7167d5ac6c4ee431b3492fd14adb86305d33755a627487d474215ef733c09746109e4e3da3ab7e33738", 0xc5, 0x7, 0x0, 0x3, r1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x2, r0, &(0x7f0000000180)="0008b6c0130c85a5035d93c0153e2444f4427ec7eefdd91f24bad84e158ad2161e2753f1787fd50f45e5b04d29be22e11f9078afe88eece84b310516ee3fdb9eeec4b54452a092b266", 0x49, 0x7, 0x0, 0x3, r1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x1, r2, &(0x7f0000000240)="1b3a09e92b460abb50c475d58219fdf8af11e9e3df6b73d7b189dafe7e17d60176544256dcc90413947abe8583d61fd16bdd0fc5b0a5ed8b3bd18940bf7a4e7e81ff1d804f769bb541fdfd7c8b8f9a80b256a1f747638e6d48a6a5972078ac9c88d4b6057ee08e2e01d7af13886720c731bec615ffd75cfc4f7d82b64304958423969a427fc3bf5174f3835193da3604a85de76ce8c33a363d93f615220eb72371497d98e229a0d9f2e675b453971617668daa13ac13391f10943a6a3e6e0130a9b8f9ac27dbdb89d0b333557aec105923311dc88b8efee9f8e0816df597a288005c6d", 0xe3, 0x1, 0x0, 0x0, r1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x401, r2, &(0x7f0000000380)="c0365fc9ee2407791a8cab7b75feb45b13f49784ae9d30e0a397e7a018551f7aa653d2764ec01501480b77fb57e5677688fff3dd20787723a7e38845e804ea4f9914afc5389dd3c46ead6f71b064a0ee290a7e0c626db6c6cf7944bea38bf60fe77523f29534954b7d92eced139076bb1cf12d919cbf5b27e2250a810055818ebf8076c954446f64fd8f172b671135fcc896a003a17bc04e", 0x98, 0x8000, 0x0, 0x2, r3}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x3f, r4, &(0x7f00000004c0)="6cc446e7334eb7c8a1ca54f2d6f6d19a9d972b07cfc3963d7eee62a66d03a8006944849cd3a704d5b8b052f4a320655160de1331ba8bf734d1b0e4f83a76855b7584df4f2097290f1a56e2187f5a67d4f0070774f6ac7b14a29aee92864963e28281354a4e09b6975b835e34dd7620a8b445b201caa2b728507b935bf160cb873ffa717782806ce80589a3fedb0b42582389e483f28bad5c50ff13ed5d77d6446750a977c3d6798d6c6429ccffbc994729c63b1770c33262e2992bb6dd368a4a96f96c66cafb4fd4028edd01c540effab061fb0ba3ba0292e7526a8ee86630e808f48a8d167495", 0xe7, 0x0, 0x0, 0x2, r1}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x8000, r1, &(0x7f0000000600)="c59ce9e78e6b5c5f48987b0e84bc70ffb1c0da993008d8308e4129dd7bbaafc76bfb8897a381f250ba39ef6bbd1b3c455a66a1b6598561f5187e70288c28de89a9901f15520f2c29b734ca0da883324c74aba30e5951ccd088746a8d4f0314ff07e983c6a09be179517fbb62ab28c50b323c1c68e801e3c6dc8320b05edc3a3197e28d5b5ed0917fd623f0447105a83be96dedff13bb73af3460f8f03f09704497989bfba7b6e7ff37499019f5f434bf36a01bc0d19b90353d376f562aa9eae18c08d656aeadf17a81", 0xc9, 0xffffffff, 0x0, 0x1, r5}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x1, r0, &(0x7f0000000780)="9a1a9ddca9cf2f15cfeb543bf95be51f13bbb53f8ff02e57f268ec7773008c438184079fb46156597fecce268a2a8341d906688e31d680afb896efac91f826e6ae6d5ab73db2ac950d790741b26de73abf5338f3cd5f39fdbed37310ea8381d54a4e863e4aa274a8f6e8f8d8573700cbcdf177a575ec2bc609df66162527bf3864d91700d55d81b949dff7f8970e17e42f8d1f2ad15812b7d35470cef6ba1a538b5c8b5468c754d403c27a242a0d7305e2a35fd61e", 0xb5, 0x95a4}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x5, 0x2f82, r6, &(0x7f00000008c0)="2feec69a834761f8fd1fa930d709082f54b0edc2647bdfc4487556d797334554badf597aacc857bb05f4aab922a299b605cfe028075464f71a2e021e2ad4ef95881a923f6174775b3cffc07a2e0b0827d4d640a6caa45bff90d0d724935e858d27f75ab4c43df162d150f2e36f8918d4dcb4eda5591d1b0b8bf8083d4649ff4718e3d27d8026773a0235b2bb7a955d732e0c90adb95a99a00590e5db74aa337da18cb7061b3ff87568c09b3fc2b837af49e7ab21e3fd0ba59803639d86d7d136f77620a5a1d44bee8eb85c771ae1ab485ae4819bbfa4899d04e9fe6f755ca9", 0xdf, 0x8, 0x0, 0x2}]) r7 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_SNAP_DESTROY(r7, 0x5000940f, &(0x7f0000000a80)={{r3}, "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"}) 17:19:56 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000340)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6, r3}) r5 = fcntl$dupfd(r4, 0x0, r4) getsockopt$inet6_udp_int(r5, 0x11, 0x0, &(0x7f0000001700), &(0x7f0000001740)=0xfffffffffffffdff) syz_io_uring_setup(0x37a5, &(0x7f00000025c0)={0x0, 0x6de4, 0x4, 0x0, 0x275}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000002640), &(0x7f0000002680)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000026c0)=@IORING_OP_ASYNC_CANCEL, 0x3f) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000380)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x5, 0xfffffffffffffffa, 0x0, 0x9, 0x0, 0x1, {0x0, r7}}, 0x7) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@private1, 0x60, r3}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000004c0)={@local, r3}, 0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/58, 0x3a}], 0x1}, 0x10000) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fbdbdf251300000038000180080003000100004014000200766c616e310000000000000800030002000000080003000200000008000100cba485ea1479d2275393843ced1c17260daef766838b921be26217bae710d133c73b3e0061b92887f17928c7475847ceb755a6d4628a20760649931dbde447447ad482b59e0000000000", @ANYRES32=r3, @ANYBLOB="54000180080003000100000008000300010000001400020073797a6b616c6c6572310000000000000800030000000000140002007767320000000000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB], 0xa0}, 0x1, 0x0, 0x0, 0x4000893}, 0x20000040) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', r9, 0x29, 0x99, 0x20, 0x6, 0x1, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x8000, 0x6c1e, 0x392d}}) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:19:56 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="f300002961ac5e"]) 17:19:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:19:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0xffffffff, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:19:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000140)=0x37, 0x2) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000040)="3a87b855059743e78b2dc91ae658f88a9d9bcb726f7f7a202b3347be7d269984aa6ad0a3d959e29e14ccd5ad7ea62d63f1b6d1ebc65c447e924c1b6ab10dcf1c86ce5b35edef51a652b00243ea04e9d69759c06f600890a6582d0f105fb4d9cbba9b86a9403c061698f6d1653785b0ee1bd9860744cc20322ff1b15b36027076bf2e5222081ab4feb4fcb078fa441c589737ea2b8d14e4055adea8eec0cc032daf4463a4f4bea1a9e5e83465ea389e3b9b9a2af4854f2f14b473ca6ae3f11555af447d68674ed38f6912139e4a2007fb4ac9cf9d16fa9360d4d08c564c371a542560b317b56c6d87f87b39db") 17:19:56 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x6802, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000000c0)={0x2, 0xff, "85a85d", 0x2, 0x8}) preadv2(r1, &(0x7f00000014c0)=[{&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/21, 0x15}, {&(0x7f0000000240)=""/172, 0xac}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/159, 0x9f}, {&(0x7f00000013c0)=""/249, 0xf9}], 0x6, 0x2, 0x1ff, 0xf) 17:19:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0x7}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x80}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x248}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x117c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd3a}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x4db}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x41) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:19:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 17:19:56 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xfffffff5, 0x0}) 17:19:56 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x28000, &(0x7f0000000180)={'trans=unix,', {[{@uname={'uname', 0x3d, ','}}, {@posixacl}, {@cache_loose}], [{@fsname={'fsname', 0x3d, '%'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vfat\x00'}}, {@seclabel}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}]}}) 17:19:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x10, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:19:56 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:20:04 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xfffffff6, 0x0}) 17:20:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 17:20:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:20:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 17:20:05 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x400480, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000080)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c) 17:20:05 executing program 4: r0 = request_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='\x00', 0x0) keyctl$negate(0xd, 0x0, 0x8, r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:20:05 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0xfdfd, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:20:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000080)={0x1, @write_page_scan_activity={{0xc1c, 0x4}, {0x0, 0x5}}}, 0x8) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) creat(&(0x7f0000000040)='./file0\x00', 0x11c) 17:20:05 executing program 1: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) dup(r1) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000001c0)) pwritev2(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="2a892d57fb56a5990d819d231eee75999f06384cbf0cd230b4e3767a4495ee434bdf25a42e47f734846387bb5437c2a13830638fac5b7e32a367ed9674f0fe42b55cb5512aecb5b5baf02de6773396221227bd124ef24dd7ce37c584b62e6257804efefd89b5885f08bd25fed5ddb45338c40872a47eb2361a400400cbb1da47210c16dc42789bdb72d734cb56b0a6aeca149208a6e4022f958e5f904e7b2ccf4ff18b", 0xa3}, {&(0x7f0000000100)="1a70614192cc18dd63283e839cf14955f0188b1aa3624cc066e73de413036492a0925a45c64a15b3464bc0c0f5108183d7fc0869fe64626c20b5c81b937956776d7bc38d966df76779e9cd3e42e4d873f3e59b8f98939b05946d32af5e40a04613a5ef7a72eb72c05be53ed7fb08ab77cb4cf52077341ba91bcdbd400523b26d7b805fe3f17c1e4c", 0x88}, {&(0x7f00000001c0)="447d29e39d84ec1321f86b355f9ff51145851814147c", 0x16}], 0x3, 0x9, 0xffffffde, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) 17:20:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_create_cis={{0x2064, 0x1d}, {0x7, [{0x9, 0xed}, {0x8, 0x5}, {0x8, 0xff}, {0x40, 0x6}, {0x7ff, 0x7fff}, {0x400, 0x9}, {0xffff, 0x7}]}}}, 0x21) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:20:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f0000000040)="78c9e3d2223afff80b53e875db41892a830c1bbae91bb1f0c13bdcaea87d61aa31b21c5824f4e4fe6d1aee6f1d07d4eeab65423ac87138762741e08637786f9f8241e568bd63ada57807e292431e2cffe896b3ad548a9e4115460f595c2bf10e7d12036af293d05b2ab58bc7de2ad5590b3dc8cee9e48ac39535735b9c431f5fb4b75c5d") bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x4, 0x3}, 0x6) 17:20:05 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0xfdfdffff, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:20:14 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0xfffffdfd, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:20:14 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5452, &(0x7f0000001000)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:20:14 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:20:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x2, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:20:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 17:20:14 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xfffffffe, 0x0}) 17:20:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x4}, 0x6) 17:20:14 executing program 1: r0 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffff000, 0x6, &(0x7f0000001440)=[{&(0x7f00000000c0)="c0fbb41109e9bf3a7c31adade74f03116312bfcad9489c20f772b5f54f74e83dc2d2c90b7597692d9d738fdbcb5157d4d9ae5dbe288348a5b9b50b51f98721c3823b228ada169e255ea7675c03d20b453a5791cbbdd40ab1c828af12c9220d8bbce4e1ece723e1213bc35ba766c8ed3fe4f0ccabf29565af34fc580f7f9182d191926a6869ce29fe3ecbbc1dec35572e270588622af503f9702c99b7f250c0bdf3a9986d3523c8a66c1b876606613d88ea340e7ed2d8c2c68497fa1f101e73ee24cef271340fc2", 0xc7, 0x7}, {&(0x7f00000001c0)="eacee478838544befd0e4a9f09141b59bf9938a14d067d2d5222210cbdfe6472d8f073770db1d8d45069f4b1a5959b8e65e8cf6992a24c08326d7d7ef41975d5d737245c4136173485be05e4dc7836dd93ec05e303167eb7229c7bd322f8c30a5ae9083e081ca6be2c7c618c96c83ebea2a4d8bff5df50294c7a40c3fc294fcef1f1f5424b1eaf0ae9dadc93d529619d46669737dbefea3926dfed79f453ec0e4ad60ccfd71371e3e254f60939636868a6efa647", 0xb4, 0xffffffffffffffff}, {&(0x7f0000000280)="e2fb3af4a1d191181e11c6519fb9ad2844542d586f877b597771462b78f26beacf2d147262a0", 0x26, 0x7fffffff}, {&(0x7f00000002c0)="dbe138875848e95b7d2c678389bd80d8ed5b5228173c441365f3a1082042ae1fea850b28e59118cdc071798d0465659e228daadcd36f610a97eef427ff982bf19e811bf12c5648b966967496dff1324dc69ae780", 0x54, 0x401}, {&(0x7f0000000340)="77a8b6a7e7471bc4d54e60efb35c963bd2cefe9aee0a3c63f0f7ce7a6e2cadec957b7ab243270e83470b11b672293331cc8bda3abcb06c8971c11c612d84625c7fbd24a6010a85ab95b1ecaa5354076f44650b8940bc7964aeaa795701b437875a1e51a36f44c8d44b0ca8d5da4cabda1180c786e405b4c03c7f9d03053f60353feb3fdd77db835cb7240cb4a2f8276476fe6014854726389eaadf0d24344651dd401b1afd985022fd1f8512f864a84df5af98b083480074982cda28291efde838f17c30fddbe4aae9ced77dcd5d70311f807adb0772418014b91e55239b6f90fed69238d97ffb9d90630ba3052417f0a604467804887d2fb4407cc7e4684c59a676c947e5aa05f3b46046c69cd5688cbcea09acb54afc0592b9c6e374f81b94491d6e08af0963fcfc29981c80eb59ff0eb68738b1a79ae773bb831f684afd849bc13d80cf583ed171412aae037a8c95cafc3c18c077df5de3ba0e2ee06a898d2e4949e80277990d50b48e7d6e806c5a23d5f1749b334e22be534ab0f2810bd757720c5d4f22c35664143f93e35569adb07fae3c07c7a9744dad6658d35203103f5291353ee6e46d9f36e1bbfc0f6d6c30caba106ee9a69af809ee5c256a488ba1ecb8d213ecb0a7643e73f10616b72e7309175e2b38cf857c7be6f58e94ae0febcca9bf3035cbb007901395c769c7e78369c06166eef15d3ec16f882871f88bc5fbe028b18be1c51810bea92f67f20ad97e63259a0dc24137c8c53a67a5f6ab3bdbd58fb8dd308d1e607a385d01fd80fae83ffcb28cddd35e06c08610a8ebf22bff540953a2d4f02f2d221993ff2aefb6e887d768501f7a49446ccc07cdda043d80a42360db3bb5ab44aac18b77a65c5c2ce438f23fda8a041f2efda91b6c01d59e87349baab6962dd00abdda26b3d86332adc90ebbab351880766d1745b2e86ad425b0468c733f263a58b9addac147764adcd2f2b74b9318188ee3703496c88b826d295436bef2a6a1dfc9a9d1455a0b69729cd7c7aced2702427931674bf619b3e68f3aaf9487aa882f89eeb6f9250e4be12e07566d6a5ae69e38ca0dbaa4289e83befab611ef7cc3d368edd1bfed3b5eab6471b1007af2f339e7c72c502afb55ae61007eb8ac0f0f469398d8d7162bb6b7dd01f95d45473db69dd3cc92fb568c21197bad296e366aaac5ab279891f771775992d0d18931acf40782e058d06580306c816d43d3db8f0a09a26f5a97ef472d596e5ce1ce6e72271ebaa60cf07aca349342563cd6b39d3bafe8031b7ab85dd638dc35912a52b0ef7208d7aa4e99a0b37c214d8d1c76422f79e7a4da7de4a6ede62726e956fa346938243667f091c032de498cc49c47a695fc63dc8eba9d7cf7095da3587c46f152d14ab4a99dcd18c7c2bf9a1e1102679526cf9a14fb76c8efed56e423e23510e103dbf1c738789f812015ebc30da03ba29b47387aeb6fe2aff1a7a0510af86a20f9d2355c61daf330be50215964b966e43ffd7f5ac43413b4da99d0043427f604d52746e8c2e2d575e712cda965d65ad37d069ab4166417ee87086d0b672fa6f2d237a3b35e8cd89a28e47396ea99ef55246f74ea324ec9a5ca7a44af7b9ca0ca72ae981a9572c4d6e5379fea002ee9aa8520b72606d8b9c6e71f1f2a9add74244c57d4f546790c6729dbb026c15774ca837132c7603620781bcd40c8d661e30f3647c2a918fd88ca4dc163db959ba4f6f4b0ca93c41c75f8251d2417c9bc75a43f18cfde645825b193b31339864d50af2cf8fe8d0ccf7ae1d57e6ad0369278d4ac6b82827fd09c79357ac9244a1c8dca8edd9d393d83547274d7617fdb252e1f12cfde00056edd0c03286693f8abd834c9ca189068cb4d900786fd0f8166fbe016a6497574771ba2ef892d57aebd577ff38b216cf60ec4047c3e8037044c74929d8bc13fdcb5e8d5e83d195c872b020edfa4f691efbc383c0bdae5ed89ddd3d71c50bf9fe687fd2aa54933f0bf8ae234624b86ae464b2aa1d8df95e4313de5867e51b3b27d93f9d34295498d60058739cf74f066edb8f166f9faac3a576d4c7b4c64ca032ce0678dfa891114a3666cedb1a6a159985f2be239aaa3314a07c3c3b09abcbb0d8e51083b7b59facb66f8258c42334a96c22e5e8dc9443d8c363cc3b704a24c26ad83f702230b874779c1f2bc5146ff6726bd82a15c64201f7e85c5eec5458dcafdb632bb009cfdc682bb2b82ee5e999e8265e66aa781e2d9e9feaa7e7e73b55d80920f4fa2a50e11e8fc21afb0bb45ec3d6609f9d3ad108cbe9f5a5ae45359e49690e41a68018dd83fee10d9d606adaebf64da7d898e2355f24bfce11500576be2ecf78c2d344aa6f0c212d59cab84d3fa3cd8c3754d6818b58fb85ba93348911cc111b4a689fabb8c11638d1905ca17958180dbb0a0b0bd07f75a7072274ef3c5521a4b6c9096d447c270ebc04efc51f58632083e398db04430df9c49c137cc5d361119d894a36033b248e468c1c293c75539285aa5f4d83f8a447c61387ac3a329583a3eef05940000c035eacb038347269fc442ebe1e92b88f8397efa5efcf0f00b440437fabbc3757a76b95809aa3ff6db4fdf1766ba3c26fa4352cdc3f1c433f8997de0073029982ba27d0c8085d762688dba73dba08abda98d31333a1589b69c83c3f8f82c19892d38f81d91dc380804bc7be7ddb2065f00e0b8d60c1b8bcc6802e31c87cf2d2615c7faa56922b873f47d893cb5b1a2d0d8b91e111ffbef9d2b62f1cdfb266f3482447c152a5756213d5034dd8d47301eaeee4f58e27fff6a69bef50d28dcbf15d7fe6704170b2b015df5305a1a73a71fdfc0ab6035844f1f2b7b3b2ff8189378932a22f80883f6fe0ef0aebdc6e045ba3099981a3f558d9a97ce71e806f9607959b86dc72632b50a2252e6784773e07c4c24ffedf8e3ebd52029d5578e475618399edbd892be28d22ab5e73682017f87251432746598fb483157a9dae2ccb361b33d779c64852023c1c1debb6c3d6ced502f44ca322e09ce648b9942ba55617d79fad3309a60d30b58f8e8e41776b2df77f27e86e88e926bc4045979ae606e32e2ef3e51748e8072360f83c6f570cdd8a5943aaf03eab5c8c39722984e9eadc380887564fe5d61f896ff10015abac5ca8f6797d6fac0e73a3ba651c1b5cd3540f884f5fc07a2e3d9e8f24d18621b27bcf7edffbf6ff9f8228e8a297a000a35baf47b6b2f332fc127e3a1c8a347ada74bd43c5d6b8a254408b2b479a97952f2a847499f6232d4d70e76476f22a50ef1baeacce0bcbaeb84d0558fe37c4c8f3550670d72fc3eed6a1ddd5e626207d37835b4836012a4f0f439ec034a8a96b6b4c76b8ed6f5082ced34708cfd9db32257f7de1476f16008af795d00b1e4506d3e2c223afb484e7a54a892a7767a2ce5dd5ab7f7f4322d8a51df4f5d30e2a0dbec2c56314a873027856ebba41cbf33ea87697634bd024339c2790bb4f08af61f09f87a23a0bb35da4c1d557e0bfe38d95b5651b1bbaf798714fd7c5af7082e7443f202878528b333c9ebf7b68e2f74bc2c3620b05b0117936e4bdccb0fd4e890423d83f19369e2286ded9f17c7df2ba2db0e73138d8b2a23cded89d46fc4cab7e12a8f515288c2e0468258e79206f0a970a19796a282e1313f40cd6b5597fe6524c9b951d0f7c7e5ede2c585e9fef0f3ae1511126da8818d0d9598198d5a7a9b4b0b5fd77c68959bee032a9bc0106bdc70e46003a8154b96c78503e1740497139bb1b04bdc9c241612d1cc4378f85731ea8b502227f32b394f74d168fe05c282fd17f892cf87f1565d7b953693b2e41f62114188a6b0202c70b7c5647fff8ce64b3ba7edd12188645c833aea6f5dc8630d5a28bfedd3ea3ea9b1a9eec0c5539a56d45025e2560f4d926cf6643e0f7fe053bbe5800e6db7469e8ef0512f3c90e2ee0e255f02d0909705a55a5f920545b568e8d1bea1965397f03085c2af167dd9665b97e8778be88c1b64ec99d5c97e8f81719227284d48aa1b8128aaa848d426ea69258c92a924c50b27331a84b7b326211bb6b91040f1bf077b6cef00ea0926ada3917d42a1d842b5f13760bdd50722e62048bd42068ddaa4a1b7a44439635d85b72e0065dbea22a53dcd72031a1288ce857d90079687a8e66761afc0c5888d825199c31f66e195562cd333ca06d93bb7b29a59a57477e58f497edfc12a6998e6cda0177eafdd0d60e043c3013221e4de2a501ddf312937ddb984eccec0ca078f309424073b4d3ee73c582069edab31f40dcc455710e1612de2c92647deea6b0da9ed30083e953cb45a330d116326174c6443e3624509521111594aea88254faee30b717ad6719fb546af90c1e8efd92fb70d5398f113fc8a98bee4a1043dc28184f9184fdb8011961237b6da1c04005c0b1a818eaa3c9310e7f243ef6c48f563a50d4922f3685faca79334cf2c8ce43421b71e086cc4a52f3ec5a625878ce94c76719b4505e6d35cfd884aaa35e3d4fe1c4ed083470c296372a8220a027f365188d74e88cf7c758aabed4aaeb0b937a29364066ca0f4ef2bee45618e44a12547178917c13a0f66e9b9e53ff02c06d97d47d1482dca45a49363c2b8c79846bd958f752cb903473c09a9fdfce525f1b492e052bb1833759cb3b9a457252b6fa848eda09bcd49663edcc2195cd92bfe4c7d4f3293e0296a06f47abeb20c9d4a7253f3521404eaa966d64bfbc9a8b2eb32a9d6a2f84464151a505e357056148246ad80dcefa9a83fa66980fcfdf320e5917e6705078606211fa0876467f26bfff30f826a1c511e4242386b4684483421b0dd3563aedf758b598f326a434a4c05f340cb0a2eaaf1f8e0091cd89b6fa4160e5bdf9d99e88eb0025484a831927f5bcd3d24a9e07aa80c1750978d2cdabd28a1520741e78f7a8e84f0f79bed34b7d667da3310a6a844e3a9e0634f0236966788458fd5cc1d4f15b408a15e2979548a8b91ac48372317edeae160d6c6d2d921144212207dc241ac2ea36a59bdc26db273062ba47222fac9cbc886ec6f5efe67275be3464510452ff5885ba2db8642c4e41a1d67b142bd36cbe7373dc0e52e82299ca31132462e2187205a37c98972b97b623dfaa93492a3fc57a97e9e5d0146775479c634ff8a096c8832a744dcdd8bf23b6b970e461c43d679d39475cb19834c585265cd625b70535392b6310d6e84cf94e8a7dd855015409f3fc22b2b3a2634aa4d1ea320bded8378c800799fad66989254f7ec7569a046158c3b834e977fb7d858a5378bb73b1dff43da7c9922b28c465f5163dbf7d93b2b842c6a1ac19c0b89925219136dea13e7a609748ac27fb4feb72b1bd1042271b191eb095e5c2888a8df7dcb7e3040505d8a82e0c85210729d1961a84c3eb637da91b5076e7ba455076b32101216e9f5ba0ee77bb40024ae3ee5fa088020ab18af6d9a93078d1c412beb66947b8862ca2fa9f005592ceb17b811cfcb368e6b2a311d571cee7a274c5cb5f912dca92e56b5fc01a4caccaa8e64f415937d65c9e62fa28f816fda2a09426efe7837b02238513885a013158bd640ab666ab70bc2479e4e5b5ee4f9a02da636e1ec429a6b669ed4af1840ae81d3b5873dc84b5f63560475c6f49a843ee4ff985c7df3978840cd79f32eee4d8a8e394374f755cdf9748845c723b0bad390c1aa0e30d96651696d96c777b71fb4dcd693c1fd0a0c4ef42fc0417918a0d1db939c5113a9820777f659c27d88ba2a66ac51c0f7738b4890e8eab75c9df1f3637ade01f022dac2a7", 0x1000, 0x8}, {&(0x7f0000001340)="7f881712da54f6bfca580a111e111b88693e14b1185795d4b4b90d9714e89118aded73238aac6873432a0570c3df7a412e2ad88f910ce2bc0e958adb198aa1ee2e7700271c0ca675f7dda26b60a331f30572ab3925d8ac5b5141d27d16c433bf4426a91f41366e7c096f8ff86bcf953e277951ddac98d893e2a2d618e4d19e74036ba1e0167ee597c3101d730c198626d54d7bbb3c5255ccec89abbaa2d126777a4f96a6a29a376d021362eebf47719ae3e09e10d653c6204d063f76d591358a677869889481efa6f0a830c1f3b2dd545f2af537e1baf88fc7bc2f3ae1277f38632f", 0xe2, 0x7f}], 0x2044028, &(0x7f0000001500)={[{@nojoliet}, {@nocompress}, {@sbsector={'sbsector', 0x3d, 0x7}}, {@utf8}, {@cruft}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@pcr={'pcr', 0x3d, 0x7}}, {@smackfshat={'smackfshat', 0x3d, '[@-}^/*\'^$%\xd0'}}, {@audit}, {@obj_user={'obj_user', 0x3d, '&-*//$'}}, {@obj_user={'obj_user', 0x3d, '\xb9:(${{-%)'}}, {@obj_type={'obj_type', 0x3d, '^{'}}, {@smackfsroot}]}) r1 = getpid() process_vm_readv(r1, &(0x7f0000001900)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) fcntl$setown(r0, 0x8, r1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) 17:20:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000080)="6fb66694b7f297584c7cf089c5821d7e36db639999e90d4acc91056046829d6c3fef938c308f9e177087f0be81aa2d257479f295ad766366fe83f8ed183d49223eda3df6f8b8893a8f775469cb90768286ef5f0faceb4b57db52c8822155b13e6ae253d3dcf898642fe48943672800c8bf3cab1132ccddb59118e05f2465b46d367ed445014ce4884d8bdee9b195f6defa433e9c60ef0fe2") bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0x1}, 0x6) 17:20:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x3, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:20:14 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x6802, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x1, 0x3}, 0x55) 17:20:14 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0xffffffff, 0x0}) 17:20:14 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0xffffffff, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:20:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) 17:20:14 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xe708, 0xa80) pwritev2(r0, &(0x7f00000008c0)=[{&(0x7f0000000500)="4d22a2920047ffffaf14b1a4fffd8fa8fa70bb7a5e760d8a77e176e6689fda14ddbdcf89b6a91c4cb5e7eaf5d7d2bbf5b0f4db01002f1268ae421294f8d563f7f9fd63f1107d55c6c1d8aadeeed9e3d53efa61131a2361f713e481dea2a39f690e77cc9b5ffe185f27cb275de0e30715163feaa60c17bd850bcc4806835feda26b8427af5d9d1684eb802b2bdbc75de6b25cd2a06ee8990162193d9d15409457360e4561", 0xa4}, {&(0x7f0000001780)="692394cb3c9f8c523013d23ae740320eed49fe99a721e9893d114f3934d5d11d405e3b21e81ee79bcc6ea483cfc5a6eeb607e4f239037baa15e0da8d62a42b135aeacca277b29d09342a8797bc864b3387b100d7235e205884cb014cd13bd0251caf94d78dfc7f340f72907c22bc06a4309385041a4e6aae9efdd4c21d8ff32665620b9271e9f97b9899cad5e72bd8febf50946c4c88d94dcf4f363a72fdac61bfd2817101af0a65d987d5966941c17deaa93c8d813663bec4920a99e8b60c477f449e85412c98919cc720c1a677eacc4602c73d92b8eb8b58a7e2446d0590151b65168e23490e768af681fe3da7aa55d97a87842a26d98eae24062446f39cf333e3e762f77a124c49b19befda5ee099d9aaf0c34193806481ccedc1593f94814e54ba64ca2de30484c5433fbbb22926306364ed72774cc479781a64a73b5a74eb5a4afecebdd4876d0054c4bae2e0bfa97f169ba2b820a00cfbaffe23bf6e5e12bbe35fc023e56dc74dae57613a5f2b34ac9deebb02c29b62a905057e85248fe11bd3e30b7b7d50d5d6d0fab9b98fd02583111df258d3e5fd162520126e7651e74135dedbd8125b2830ef97d5a82d5e1539668d134a61aeb2fb2a6797b140c12dff5ae18d7fc50bb8354e84f85fc396bf60bb84eee007ac6e5996a978509437812eecbd156573e13c4d83e4449d17f9c45d77ab86f9ad0570885a720fbafd7016b22465720309aecca885193f695594071864c6059b197b5ac17d364fd9773fc1a4d24da3249b967bc1b694cd71fd198c1a9dc1e7291b856f09edf39d58c8ad12b18f90c939d43277d64abbd28fd45bd60497e8130f522bbe7c46b546d9264ae23d4b533b2f0a51b4df36973e55cd5ba710548a80a9ac237f1687e22d32579f8970cd850da29d8f09072dd5ca2473db96c60e0de786269330b063339ee4cde9bbf22689d08f62081084ade2a75ea2fe03e718583cfc309626297cc1d2a5cd490da911f489937e712043774c249d557154b303742ff82d64088df76c14ec8529f9caf32d6ee75b9f46382e7dd5504f5387169a3845eeb243307287f5e2f1ffd6cb45ce785a915e868d451fc4b4d037e7195340a69cd5c1ce40d7426ecf4bb0d4d8a59da6f29d2db5427b8224ae3aa6be4189e264068fb0f43d5e0524995e86187ea3a9c10af59fa57cf1082a9a47aea1289935b9b6a3c883577dfb90ae6f83073ebe678f62265b9cdc596c21142673fff5d3008ce6bc938c1da1a090d6d3d61cb062751eb863ad31e9c256439556588702ed5e3ffc59661707236bd51024995f35e1c4ddcabb0e939484751d157fa47669d18ec941f0306f03bf83d0a115bcb4b9e646d87b226af8e4d481defb31d002f5aa98ccf74c2ee11b2648f5d2482c378d28960ef0ad48033ad987b125a3bdaaad0be7e58542cd58b56c5941ec4ba13694bcf476115849da7320095d9e0f50151032d2e2c2bc401181b7adb675f49265e67434cd2561e179038f5b3bcd93e26f3594298b86fa4a9b0fd925fa75427127ec2e47f7c97a70ec41c0424ac1b0574b75f64e30bab8fb0f2ed76317e597b8c4544cffa8bdc051942bdc963afa04038a1fa3846d2a7ba1b65d5a8fbbfb8b6535a4c720a4b181520e4dd3366d01d3ed63364e235d48d3e91d3ad6b5f49c5d046b38927d2879d18cddee52df3e65e4807064ccc9d8ec1de7cc10da3abbf73cca87b4b524c9f84b41e44e3956c1266f7164c50e71c6822845e90e6cb7ae1052d05973c330a56e95db38e848fb131a4524c3fe9b357e95164079b49d0c2695f38d789dd394b775e84adddd634f019f8f4aa41ead15317342ee6f04f0e1dc026c595dbe21275c76412d6054f804d153cb66e618eae864c653c5e906fbfb702752bddb3a28c19873e29991d43d57fa4bc495f83e86678de67bbda05ec9b6243cc1872390446ea9c1193e89554d9b17e81c7fd21794f39b7e7e8e926c6e4a6686abd8dc2fbd4a770b5831e431df7e3ef5a149a7bf872c273361758f6c53f7cfcb87eb6b06e00f2e53e779650e4201503b4aff2c046e4c34cb4154e35beae38eade8ecbf2ecc5c2bfe47b9c4267cfc4ee16a3cbf5ab4410b858bd75e86eeca2c95fc8b22c73b2d2929305a2eab65af4c0569d9d346d1032cffd5ade25c541d0c38b3a559a4c278003aa3aad5fe29bb21a53969f7492b9dd5a8a6574d9d6033f0175c44048b64869153dd3ad34485cedc0dd26f4e0857ed1fa8a42248879deed61a8003f30faff8d9110f5600c28eac2114e5fd6ae6210e47da413b4ffd2e7f4346ecfb2ab532fd78e52f5631c0682655338cd6975662263165012abf400203110c7a8265464c6218fc5ff89222c8aa18fa681b0e705948d17155f340bd56daf38067c935d5067ef5a2a34eb750ae9eb98023d360625510cae64ef7a83d725ae6e7f40e5379031709f41dd67fc0f225dd92b1730b63b33986a7a0fd161eb638f8da47a0e0867a59f38dd79a2532bd5bcb008260c270eb9875fd134e950561594baa0ad41266c4f97dfd8cb39c353b9383f0b82309266e9b641d2270bbb038e4b25e6fc01dad6ef49520ea8aa587f422596089c10a12fc2b08b999c6493ffc34df2fde2be21239fd5cb484dc0b9183b0081c3e44018e452e8df052880a9dceb44214a25d9a3e7bd9832f241e19b24c2f1ed390911ad8cb6370bbd49f5a22a24428c28cea95b97dbf9d7293627eb845d457dd72619a502eb0286bc249ff8d1d38d26bb744553631f1bcb30be7c87e145125b8166007bc3c9365716044ac8007d3da7a074763a5d0ffd2e325d74df5d989420367c626e76c9e968882b042ee0b58ab886a8da2c8ad2b44ded9852ff69df42e9924ee5f67b2a28c5403670679298c2753ebee67a28019eb5d77795dd806b19595a937d981b3f8c5bf526f0f8618c9416cdc7852d5829a99acd7e69638ac87c61d9a2e1ad2ef797a21f84911945121b756ecab88454025553914c771aeee493a4809b272b41565fd3262663860af8fe8bbc198e8c4074568319a27863459f05a7c7e9aa7c6db5082298772bc79e63d477b18941c7e5e5cb74df6a7e4dff07e52fb31dbf3eca79d674194dcea1ba61beed7e065704a4808c138c2c20b8d3a3f4db768212b764578ccfdef5ae4f6fd589712b441163ab9b57994c8910515a65d0667519f9dc6cc0164d40ee41850f8ea95bc85cd0c724a859bf58014d20a98235314a378fefc117e9d9ad2194285d1917496635ac366e6a84430a3bab8b517e30c4b264c50bcb34b003a551fb6cf32ed9989a3fcb1dc98bcede295d23001acf55bf2dfe8db060f09413aaaed054c70a4610dbd7bb5952ce20751bb1e7bcef01c2139b6ae1c74deb6236887a9cdd30839f3441d1b1837ae936389e5fe9b74f33280a1dfcbbe575f6c638ba156d8bf190b4eca3d9c4715ba70716cb42df9b09c409ed03c22a718a9671550133fe6e114d0ae302713ee2cea0451eb1ea06d6dccae382d1be2f4b578d6f814c0cd60da427c53ef140360a650c9a8f01c080d31261c2c28a3ce19e19e2a704d3422b3a759ce1f9352e6591b856973f8378c9d5d244fc8081d201d3b2273f05d3f7fa2f0436a8e0a58f9af30eecd32a8819a9857d7f64a8af66b1600f94b1aa475503abf88f25d149289f120bb862f2512a2148f5874f1004fc9e41d7b2f456f93d8c03b5a587ec68082b1883153e81bbfd9e4a3409f3e86fc1de36738b8370ab9c297a45b18700c281d519d8eca139ae1e481d4849dcf9c7cf69dcb307352b6f9f485b33d349e5c1931a141f1f9193a72378e8446df28e9f9586f368f34916ab5c6c14bd154968a7cc568e83efea02a1885eed52a4e18b7e29ac70392e736b35257001cfcb56afac504a6fbfbe107933c4701b9cb9df8d189bbc93bf7d2f22f62d882f36f6d9744bdc04d773d557766f41902a426acc9506f46d300b8edab08d421a844791327a86d8e6a6543e4abb31f4a0ddc2f9021f72c846ff5a9baca2103669196b06e09fecb0ca5d0b572e0e2367a65e01d8f5aafb42f4fbd22205a3d0a2bf20d7aee3076cd5c3c2ea21625c58465e2595ead6c223e7f7ec207ceeebb35025fb534b435a2e0bf83c9107ce9dac47177af886863965878da05e88e0569b997b3b3c11d2773982dd336881d56e78829f531a998277d45f537b04a3333c3287884ff29a8ede664aeed9b1896864d883095b168f38e4d399839469e616627d3e558f60f1e9336d3fbd17596f6701bb2eecbf34f7c5649c5845b05685f6ca8ea14071ac41967356ed1d184ac683fa75d5c891f330d3dd46765d9f7df53a68ba6dbfa1674d4dcf0645d73bd040ad9c9a8428e74f2b141438a6144e33b3cf86b8080255059828036fb8c2ac0be51abe62a1098b7b2dd97accde4ed44fa26c01504e922bfaf3c23ac950d4bd527961992c9a889175c42f64e97eb975ea193746445275526c3edb7c51beeaf6c903a776f56cd5a36ac7e3f2b0df7bf7c152a205e2aff3100a1e57df51f4a98968b17b4180bcd260c27b21e763d7d4a4f65cd8de9c04864508a275ea800f67e6904334ef29c0c1bc49f682ee903471625544fa1400f20d5f0c9d8ffb66b8a35c711b2fb480c54b9dd94deba0f2d70c602e9e8ac691038a20828eed9707b67c64dfe819adfdf78994dfaed03608ddd0760b93ed3f46d1ea75a73ca98b99acf4d17f6807dbe1095b025658d8cbf8a2b6106a43bbe2b21a85f8b2a5dab0748305d3fc442d034b38239f0ed51540af1c4c82192b1810ebfac0407254a21546d1b5c2a99728cb42e078e496b798c92f3690e03c2d29eeeb372ec022b84ea64dc0250db424c4694af530385b6e5e4e4498ae358265a5b7ad6e7630aa5b57d0b38b3c875eff60c56d88fe04e8ffb9431256f08bbb7e654bf43fedaa1fb5829ecd279abed668a93124fa2a2c2fdf6499d277eb98537f2ee83f4fcc24f79d40a0fa9861126a23d2a66b186cf5d592d6e582e468f1e56161bb5dfbf087bfbbb51533c01a64f1f40d0359206694ca1506b1f65b21710813144c2576378c2f6e8d4670f7b7820f7408b5b2503cf104e0218d152d316ec795da750a4698bbf43f8c35fba5ca1f7fc1456701aed9cae0881a6718ca436c59f31ebba49ba9dfe0a5487c2dbc349748ad158de6a48cb3815631f88b946123c7d40fd3390291e031e476af1ef6626130e9b9b473042e7dfb46cc775c620e58c173bb8c714d4a35c07361bdf70744ba1aad141858b6e9f16e73c624bf026f7c29baf0b1140fb4e908ab3a82a3f71452f51d0781e67cc1637e3f2a6c1d76ad74d81dbeed939a5c965b0b5bc648bd7ea49bfae6244514e326fceb900180669032751c39b5465e3877043d6228ea3c7dc1a360a2e278306cc2f2e1a328ed087500c1dad29907ef656f473fff96b15e41b1c44cf24e1cf7228172a25d2d8af25a1cc7098809a7cfbf399e84db8835b889b279e75a5b4a55e47209dfd08f1cf815e8be0a97e67a8bdf5c59ce1f121d852f134473910ca32e20897ec0db515a0e32402b25dc6c6fd12a33f03ad1db958065e08bcfbff0ec8404e8390aa07f51c516cca4eccc7bdef8fcd113c60730fa62360a9cfe76f6b494ec490ae5c400da43895de532cdf00329076c4610990cf664d50913528643a19cf44b90917459c934e750701f0bf2b9053cf41bbce5683c328451a99c86f9e2c3d2a7f4b949906ef6f3011a41b29382cb459d8244cc438cccedff31d5e1a74e34631166cd80848feab8294008ac971265da7c788580605077c75", 0x1000}, {&(0x7f00000005c0)="bf793320b953eabd9c20eacf6a530e325319dd92c2a1eb35347b5ec14c430a9aff32214b594cc656a6e7c9eaa6f23dba2a8474add942dbef5145f276d17ecbb1de116d12099715080057d4f06372668bfc672eaba4fe80c075c59118031b433db9ecc9cd22f1411b7e6f8d6ef3d765644ba3775400927c5409c251be4969dfa53de2aa8c3ed592e3d2ffb4dce9ffdbbaa1b926e64ccfe5361f1cd0edad20b0ab0b4a48fec88b2781924a167889ced232", 0xb0}, {&(0x7f0000000440)="37d2630174083502ba6183a39d37ef6e783384ad83441da4a8b55d55518f8472cf9932b666740a7a3a11dbe3e6a1b4a7cbcb41148797b45ec4917aa3296f5a6f32d6bcca150347b943dbd46579a9313e3c958bba2e19de6fdfc9f7928589f81efc856909", 0x64}, {&(0x7f0000000680)="f8d51929017177a4681001905bec4d3ae562e89d07a5ee6415a8bc9c23e9e549afa605dcfd6ce2ad", 0x28}, {&(0x7f00000009c0)="085c0e7e21cc4282ee2bf4425d07c4067d960e74163bf00ca7428b6dcbd957c2cf23529925eb32e574b4c3d835e7bd660b3ffa9ed9f72995924c0a18f002be749e908445d943b04929135e0ce5a0a052dbb78405aa52a5113138eb85d49b2e7e39dd9b4bbffff4f05f7d7672085deb3ecb38443bea50748146c9d1402435b3ba630d096925866f85af4f6b5a277f3b896fe52193ea4004528444c4bdd8d2375f488ef774194310196408c3e7d4441d8f2d4aa557fd01af55c6a20864882ab4ece0d40fb296952e4adcc424a43a850e7d515910b2dd06b5f963bf0123b5", 0xdd}, {&(0x7f00000006c0)="d1fea2ad129728e7be452aaaa359c2e826dc1f251908c45606fc2119d2ab47bf29752b31e3f5313a0667c7dd080b320865606213859e42f9199fea6e757dc118f13b332f5fe6a5431bda95a54a5d9bf9ae0558cef7e63776ef0fb3f6fa80400a2d61e5e168c49e1bd34c778f8c9edc01508de1c9374f152e14dbf26f", 0x7c}, {&(0x7f0000000ac0)="3768e4b8dbd99ab51878bc3452b480402dfefa5260dcd70310339d36623bd57fdd7fe6b7b4c958444ce6aa1575b878354536b717cbbae4cfd865548c4d05b4be111c53b72147c72a042e3fe67de3be1e07457eae134407f030c90f130e30d20da9b6aeddef6d758b7e27f9fefcc8c0fc17ee54dd45b451f6b1ee7afc1313b2b8922bd59d2d5686bb124eb54e859685cf7b333772ac284da904caa4e7df516e2503fdad73d384dd9a3f", 0xa9}], 0x8, 0x5, 0x200, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000c00)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, &(0x7f0000000880)=0xe8) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000340)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6, r5}) r7 = fcntl$dupfd(r6, 0x0, r6) getsockopt$inet6_udp_int(r7, 0x11, 0x0, &(0x7f0000001700), &(0x7f0000001740)=0xfffffffffffffdff) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@private1, 0x60, r5}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000004c0)={@ipv4={'\x00', '\xff\xff', @multicast2}, r5}, 0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f0000000b80)={'syztnl1\x00', 0x0, 0x0, 0xfd, 0xff, 0x8, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x40, 0x0, 0x9}}) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/58, 0x3a}], 0x1}, 0x10000) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa0, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000893}, 0x20000040) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000940)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100025bd7000fedbdf250f00000008003c00179d8b2705002d000100000008002b000500000008000600", @ANYRES32=r8, @ANYBLOB="08000600db83d00cc3ebf4ea2c7f3c9395252cce00416d0303c785768c02e713de33315ee800864c6fc9e356147e8c563d874b79e881e5496f8cf69cffdd68235a0f8fed5ae375c61b2e999375026267883deb405e06612fe5", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x4) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) 17:20:24 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:20:24 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:20:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x4, 0x3}, 0x6) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000180)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000080)="3874455d3a4ce7c60bd94218b69113de79a95b9a33586353d25a6b9e78a7a97b4d38cce3e42c77db192033160c00ac638eff452bdd85c49adb92d9c652784cac309177bf98327c62a003fd6443ddc735d00a55ae9773633b3c1157a13b15ef825c37934f8509cc857de2f80e0733ed5de111ac134652852a05ed0e9347972e624deb07b63fc26416204e69dbf17633ffdd0743d3852d1018da1874f3cf24f7a169695f48f49661cad560873824de1c4413459fac9294") r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x6802, 0x1) syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f0000000240)='./file0\x00', 0xffff, 0x3, &(0x7f0000000440)=[{&(0x7f0000000280), 0x0, 0x6}, {&(0x7f00000002c0)="6340ee9e705ba5ff77f5201f912592e06dc1bb711bbd07c05bfd784aa84cccc5661c86cacdb3f982f79233c8d76d2cd58c0e69594a10e9e001d83ee43e5ddd780c85b513e4509c70c9deff8d6dba3d0bf4924616ef72ea466c3883ee6bdcf382218fdcda651b5ca61dc9e9e56044b7e872303e4285fdb2350b5ae5272b305cc2b14f88d0f8a20f110b31767509fe997a4526dd01cea011bb0ff82edc", 0x9c, 0x2}, {&(0x7f0000000380)="9a80e227f335bc12786e191b329921ed086834f3f53d5f779a2182f1ff69ded9f5476b0466f70c399ddd0109f7477b4c86c2eaf7ea92378a5782aec166de6ab497ea274de5f045cfb2ffb5803c6f076bd883687bae2351201ba358bde73dca6c6916e2170f3609265f84165963f1a6fdc505d2da02bc1b653130995114aa1ec70c0f4551540d462d36fcace3bc57ba343973d1cc548cbd944fe73d1ab0cb8dae5e92617bd3840d7d0331b66ba5349102f9c19ac24c6729", 0xb7, 0xffff}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='init_itable,appraise_type=imasig,fowner>', @ANYRESDEC=0x0, @ANYBLOB="050000006e65723e", @ANYRESDEC=0xee01, @ANYBLOB=',seclabel,fowner>', @ANYRESDEC=0xee01, @ANYBLOB="2c736d61636b6673726f6f743d269d2f2c666f776e65723e", @ANYRESDEC, @ANYBLOB=',euid<', @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) bind$bt_hci(r4, &(0x7f00000001c0)={0x1f, 0x2}, 0xf) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0103080ac9000300ff0100112f30"], 0xe) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0xf, 0x0, 0x4}}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000600)=0x8, 0x4) 17:20:24 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = getpid() process_vm_readv(r1, &(0x7f0000001900)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r3, 0x0) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) r6 = epoll_create(0x10000) r7 = dup(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r7, 0x0) r8 = signalfd4(r7, &(0x7f0000000080)={[0x8]}, 0x8, 0x0) r9 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x14, 0x0, r10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_STATX={0x15, 0x5, 0x0, r8, &(0x7f0000000440), &(0x7f0000000340)='./file1\x00', 0x8, 0x6000, 0x1, {0x0, r10}}, 0xa50) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x992, &(0x7f0000000040)=[r6, r0, r2], 0x3, 0x0, 0x0, {0x0, r10}}, 0x6) kcmp(0xffffffffffffffff, r1, 0x2, r2, 0xffffffffffffffff) 17:20:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 17:20:24 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x6, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:20:24 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000340)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6, r3}) r5 = fcntl$dupfd(r4, 0x0, r4) getsockopt$inet6_udp_int(r5, 0x11, 0x0, &(0x7f0000001700), &(0x7f0000001740)=0xfffffffffffffdff) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@private1, 0x60, r3}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000004c0)={@ipv4={'\x00', '\xff\xff', @multicast2}, r3}, 0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/58, 0x3a}], 0x1}, 0x10000) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa0, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000893}, 0x20000040) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x29, 0x80, 0x8, 0x0, 0x22, @private0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, 0x700, 0x0, 0xd8be}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x10, 0x8000, 0x76, @local, @private1, 0x8, 0x7800, 0xad, 0x5}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'macvtap0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x0, 0x81, 0x5, 0x8000, 0x1d, @ipv4={'\x00', '\xff\xff', @remote}, @private1, 0x80, 0x8000, 0x5, 0x401}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xd0, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_LINKMODES_OURS={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10000}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0xd0}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:20:24 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"0c260072404775952ebc1a0d27ebd638", 0x0, 0x0, {0x3, 0x1}, {0x20, 0x1}, 0x0, [0xfff, 0x1, 0x7c0, 0x0, 0x1, 0x6, 0x3, 0x9, 0x1, 0x7fffffff, 0x7, 0x0, 0x8, 0x1, 0x9, 0x7f]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x9}}]}) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) [ 1911.991066] EXT4-fs: Invalid want_extra_isize 9 [ 1912.005999] EXT4-fs: Invalid want_extra_isize 9 17:20:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) 17:20:24 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0xfdfd, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:20:24 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x9, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1912.116721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.117802] blk_print_req_error: 82 callbacks suppressed [ 1912.118889] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1912.120317] buffer_io_error: 86 callbacks suppressed [ 1912.120331] Buffer I/O error on dev sr0, logical block 0, async page read [ 1912.147279] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.148911] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1912.150227] Buffer I/O error on dev sr0, logical block 1, async page read 17:20:24 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0x2, 0x1a, "a41c2c", 0x2, 0xfb}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:20:24 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="81318042ca2efaaabed8419dc63bb3d744f56b553df34916b955a7fc3a88d1a66889dfab197b9d76e658fd9b887e870000f39a32014ba703fdbbb6104da7d5439b53276c27bf9295dec0f0"]) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) [ 1912.191443] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.192443] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1912.193675] Buffer I/O error on dev sr0, logical block 2, async page read [ 1912.217025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.217917] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1912.219390] Buffer I/O error on dev sr0, logical block 3, async page read [ 1912.253364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.254615] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1912.256161] Buffer I/O error on dev sr0, logical block 4, async page read 17:20:24 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 17:20:24 executing program 1: r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x8, 0x401) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000100)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0x3, &(0x7f0000000080)=0x4) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) 17:20:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}) [ 1912.299399] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.300464] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1912.301922] Buffer I/O error on dev sr0, logical block 5, async page read [ 1912.324011] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.324874] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1912.326078] Buffer I/O error on dev sr0, logical block 6, async page read 17:20:25 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0xfdfdffff, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:20:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0xd, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:20:25 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[@ANYBLOB="13"]) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) futimesat(r1, &(0x7f00000006c0)='./file0/../file0\x00', &(0x7f0000000140)={{0x0, 0xea60}, {0x77359400}}) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) mount$9p_virtio(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100000, &(0x7f00000003c0)={'trans=virtio,', {[{@fscache}, {@cache_mmap}], [{@obj_user={'obj_user', 0x3d, 'vfat\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x36, 0x37, 0x32, 0x64, 0x36, 0x63, 0x62], 0x2d, [0x33, 0x64, 0x62, 0x66], 0x2d, [0x8932ddae7cce0bc, 0x30, 0x33, 0x63], 0x2d, [0x56, 0x36, 0x39, 0x34], 0x2d, [0x39, 0x37, 0x31, 0x65, 0x30, 0x30, 0x34, 0x34]}}}]}}) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x100, 0x1, &(0x7f0000000240)=[{&(0x7f00000001c0)="7b38b8cc5a0ef97a104643acddf4602e15129df4a40f1de5f5865e70c050687b7148e77c08b3ba107a8aa512", 0x2c, 0x9}], 0x842000, &(0x7f0000000440)=ANY=[@ANYBLOB="1f8b896c60686964652c736d6d757465532b262c442c736d614bd5bf338f46636b6673726f6f743d2f6465762f68706574002c61756469742c66736e616d653d252e097d5b7d215c954f5e2d5e5e282c0000000ef8196d0000000020679d35b10b58ee61e1a2228dc529ebc8cda089902ef2d8d091bd4b0504236e3da02ad2e1139bede6c7f50d8f02bf7cc8027d6f400fda1ce8512a8d718b2b7e3c1ac9e2f75aade6137798b6d1f8a27868f2926b4b7d76aa90b4b3fa390d811d78b0f87fdf6410212a062b0336d2cff32da14dc0fff77c43fc427d9e0e8e9c114230edcc303b7adbc0f20b70c802d81f6e9edc3de032fc249d5eb9b020632bd5c71640dc2d778ab660aaacbd29dfc5b1ef6fd62837988b5dedb2e6f7be3407431b05d3223d0ca331590f62fe5ea3835882802a5f1e22d5ed7d6666e8dcf1e9653aa21d4bf6e2b22685d202f6b58643aa76c573d6b81172ba5d1c4fa7f64280b3a22dd28865b2eb7b7f72108ebcdac3b0ef8d8fb3309dde11ab82359e1b4675a6828bf5a59f801e6c913e0445a0673291b537e2943b87978700"/415]) mount$9p_unix(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000600), 0xc0, &(0x7f0000000640)={'trans=unix,', {[{@cachetag}, {@access_any}, {@uname={'uname', 0x3d, '9p\x00'}}, {@version_L}, {@uname={'uname', 0x3d, '^'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}}) [ 1912.356025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.357212] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1912.358717] Buffer I/O error on dev sr0, logical block 7, async page read [ 1912.360117] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.361106] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1912.362496] Buffer I/O error on dev sr0, logical block 0, async page read [ 1912.379525] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.380793] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1912.382723] Buffer I/O error on dev sr0, logical block 1, async page read [ 1912.411088] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.415978] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.420212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.427188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.434739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.439679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.445244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.449002] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.451427] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.453880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.457434] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.461124] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.464130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.468325] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.470357] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.471476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.485430] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.487045] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.488596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.490604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.493147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.494765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.497195] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.499260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.501232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.503790] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.505133] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.507599] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.509377] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.518492] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.521132] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.527513] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.534108] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.539128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.549767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.555073] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.562440] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.567216] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.600396] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.601508] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.603064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.607035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.608415] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.612050] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.615603] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.619093] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.621225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.626007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.627209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.628642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.630395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.633022] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.634435] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.635637] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.637649] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.638880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.640072] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.641425] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.643013] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.644174] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.645330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.646565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.666667] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1912.668117] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1912.669178] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1912.670207] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 1912.672096] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.674047] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.675863] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.687001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.689998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.691140] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.693088] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.695187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.696420] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.697575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.698705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.700079] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.701213] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.702355] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.704275] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1912.705514] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 17:20:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x10, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:20:33 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 17:20:33 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_read_iso_tx_sync={{0x2061, 0x2}, {0xc8}}}, 0x6) 17:20:33 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @remote_oob_data_reply={{0x430, 0x26}, {@none, "d7749bd58ee93e5192980dc4b916746f", "5d41e0923d11f922b72754a780d1c237"}}}, 0x2a) 17:20:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @le_conn_param_req_reply={{0x2020, 0xe}, {0xc9, 0x7, 0x3, 0x93, 0x80, 0x3c36, 0x13}}}, 0x12) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_local_ext_features={{0x1004, 0x1}, {0x8}}}, 0x5) 17:20:33 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0xfffffdfd, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:20:33 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) utime(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0x800, 0x2}) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:20:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd}) 17:20:33 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x4, 0x257, "85a4e6", 0xff, 0x6}) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x105b02) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x294280, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0x2, 0x3013347f4fe0e842}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0xffffffffffffffde) 17:20:33 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431720420200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[@ANYBLOB]) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xffffffff8d5f60e6, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000140)="947a823507cbcd899e59c1e309a72a981ed52daef750654eea699ae416403dd43bcf6e54c34629114c5f6a0f9503ec6d37b4237482be0d", 0x37, 0x6}, {&(0x7f0000000180)="747a5357024e7b706c16055c9305f0f89381a183a98b059fe2309c90399929561637171d8aa8927ac2671604500dad7ef2a907f30f9954577d4c370f800e481283bb7435fd1484b94a55f162347a08c58a43d829fd30ccceddd7a5b6281b2a6acb3ff7e8d3ff9712e00e57228d9c205b7437682200eea4cc11078487", 0x7c, 0x401}, {&(0x7f0000000340)="a2fcb861b3173ac48f3ebae2f09b8df24335f0b62e1a65b5989c1d261327a2b534d33b6d689b6299714ce1afa0bad8b9d27228fed444af40429838e6c58e47c2645461c5", 0x44, 0x6}], 0x1002838, &(0x7f0000000440)={[{@uid={'uid', 0x3d, r1}}, {@size={'size', 0x3d, [0x78, 0x36, 0x39, 0x25, 0x32, 0x33]}}, {@mode={'mode', 0x3d, 0xfe4}}, {@huge_never}, {@nr_inodes={'nr_inodes', 0x3d, [0xc, 0x39, 0x2d, 0x34]}}, {@mpol={'mpol', 0x3d, {'bind', '=static', @void}}}, {@nr_inodes={'nr_inodes', 0x3d, [0x34]}}, {@size={'size', 0x3d, [0x6d, 0x78]}}, {@size={'size', 0x3d, [0x31, 0x37, 0x39, 0x67, 0x38, 0x25]}}], [{@fsmagic={'fsmagic', 0x3d, 0xd2af}}, {@pcr={'pcr', 0x3d, 0xa}}, {@obj_type}]}) 17:20:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 17:20:33 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0xffffffff, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:20:33 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_link_policy={{0x80c, 0x2}, {0xc9}}}, 0x6) 17:20:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:20:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) clock_gettime(0x0, &(0x7f0000003600)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/145, 0x91}, {&(0x7f0000000100)=""/29, 0x1d}, {&(0x7f0000000140)=""/133, 0x85}], 0x3, &(0x7f0000000240)=""/143, 0x8f}, 0x3}, {{&(0x7f0000000300)=@qipcrtr, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/145, 0x91}, {&(0x7f0000000440)=""/175, 0xaf}, {&(0x7f0000000500)=""/124, 0x7c}], 0x3, &(0x7f00000005c0)=""/203, 0xcb}, 0x20}, {{&(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000740)=""/143, 0x8f}], 0x1, &(0x7f0000000840)=""/198, 0xc6}}, {{&(0x7f0000000940)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000dc0)=[{&(0x7f00000009c0)=""/68, 0x44}, {&(0x7f0000000a40)=""/148, 0x94}, {&(0x7f0000000b00)=""/139, 0x8b}, {&(0x7f0000000bc0)=""/206, 0xce}, {&(0x7f0000000cc0)=""/240, 0xf0}], 0x5, &(0x7f0000000e40)=""/76, 0x4c}, 0x2368}, {{&(0x7f0000000ec0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000f40)=""/178, 0xb2}], 0x1, &(0x7f0000001040)=""/202, 0xca}, 0x1}, {{&(0x7f0000001140)=@ax25={{0x3, @netrom}, [@rose, @default, @netrom, @null, @null, @remote, @remote, @null]}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000011c0)=""/142, 0x8e}, {&(0x7f0000001280)=""/209, 0xd1}, {&(0x7f0000001380)=""/170, 0xaa}, {&(0x7f0000001440)=""/198, 0xc6}, {&(0x7f0000001540)}, {&(0x7f0000001580)=""/95, 0x5f}, {&(0x7f0000001600)=""/115, 0x73}, {&(0x7f0000001680)=""/46, 0x2e}, {&(0x7f00000016c0)=""/243, 0xf3}], 0x9, &(0x7f0000001880)=""/78, 0x4e}, 0x8000}, {{&(0x7f0000001900)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001980)=""/194, 0xc2}], 0x1, &(0x7f0000001ac0)=""/213, 0xd5}}, {{&(0x7f0000001bc0)=@nfc, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001c40)=""/121, 0x79}, {&(0x7f0000001cc0)=""/5, 0x5}], 0x2}, 0x3}, {{&(0x7f0000001d40)=@ax25={{0x3, @netrom}, [@null, @null, @bcast, @null, @rose, @bcast, @remote, @rose]}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001dc0)=""/66, 0x42}, {&(0x7f0000001e40)=""/139, 0x8b}, {&(0x7f0000001f00)=""/201, 0xc9}, {&(0x7f0000002000)=""/34, 0x22}], 0x4}, 0x8}, {{&(0x7f0000002080)=@phonet, 0x80, &(0x7f0000003300)=[{&(0x7f0000002100)=""/234, 0xea}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/216, 0xd8}], 0x3, &(0x7f0000003340)=""/58, 0x3a}, 0x1a80}], 0xa, 0x4160, &(0x7f0000003640)={r1, r2+10000000}) ioctl$sock_bt_hci(r3, 0x2, &(0x7f0000003680)="7eba2ebdad3919b9def5172fbd0c11a501bdeff22fe72d35b4b23bd403b92c35edcf5bf337b9dda233b0aa471fa85425c7cf5286c1bbc9b77067d523b7c9f1f1d05dd57979c40dc405783f92979b2cddc4d181e1d709f327f473cc45699370d386e9224bb60a66c4d1dfe8d1141e72d808e2df1092df0395e21130b723c5d7c3eb56cb04e49ea2489d26404c5d7d974b11cd6f04bbc8fa02da0a0f0e016d9b156b") 17:20:33 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00']) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) faccessat(r1, &(0x7f0000000080)='./file0\x00', 0x12) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:20:33 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 17:20:33 executing program 5: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000001c0)) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000001c0)) close_range(r0, r1, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:20:33 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6c2f0605887029df57e19712856f33195e4d6203b41e37fdc4e7294ba25e0bfb2e37e5945d2af140effa35a2da7184bd734e07171dc8a0fb3d116dabb5b1a7324b48630f42d6499402f922d57a7a3c22d0728ab6b5a79fba602ccdee32a0d4b7ea856c64d7ba68072fc161dd0feaad2b9655fd05a968964d7d16330010000000000000d24898"]) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xc2c12f8964360cc1) 17:20:33 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0xfdfd, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:20:33 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4, 0x3}, 0x6) msgsnd(0xffffffffffffffff, &(0x7f0000000000)={0x2, "1854ce8e963f83294ec930493891dfe3f8c075ded221432461e0cd0de96173bf2b9d6344b04e8eda3a1e3532467615c40086d359b844e770999f1b7c80bab7769e39aea8c996715fec983acfcf5532777d2f4f5138547588f2e13fe2facbf61a040985423a5cfaa2eaed565717e6461372664c7657aa77e104585ac81da58a1fc0a3531072d04d85d1b93b1948d4d8aa4c3f06"}, 0x9b, 0x800) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/72}, 0x50, 0x0, 0x3000) r1 = getuid() getgroups(0x7, &(0x7f0000000300)=[0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee00, 0xee01, 0xee01]) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x1, 0x0, 0xee01, r1, r2, 0xa4, 0x5}, 0x0, 0x0, 0x6, 0x3, 0x6, 0x1000, 0x7fff, 0xfffe, 0x7eba, 0x1, 0xffffffffffffffff, 0xffffffffffffffff}) fork() write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_start_enc={{0x2019, 0x1c}, {0x0, 0x8c1, 0xd, "532bb7e39d0356e62b5a477e7c35491c"}}}, 0x20) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) 17:20:42 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) 17:20:42 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) 17:20:42 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0xa0000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) ioctl$sock_bt_hci(r1, 0x400448dc, &(0x7f0000000100)="559570cb576dfe22184c3b0148adeaf8fe281e8744f0c0a969fc8faadafc09026c8707fa3d1a794755e15a2675100674e74ba9e8daeee5a101bf053f974bed135e637a3a4ddb3a00c2c5503cb3173b815d758d2ef077e3bf005f8e7e3d3046f6a3611a7a5e819dc28af5c9faed1329485224af140eab835dbc8db3e9d6e6d4e0211c16f147eb34e549bc4c75ebcb268a2d3ea745a612bbf091988ad48ebbdd0f54f0857c") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_bt_hci(r2, 0x0, &(0x7f0000000080)="03813749ab4f81fd0731a40fcdb044eb365aa403c306a61223f01f2e583c3460ad0ea604ebdf8668ddd7b56bba102ec47eeca839901350231b708d143afbf3fca94e4abdd800c69c") 17:20:42 executing program 7: ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000040)={0x4, 0x6, 0x1, 0x0, 0x7}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=""/4096) 17:20:42 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:20:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 17:20:42 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0xffff, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:20:42 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:20:42 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x400, 0x100, &(0x7f0000002640)) 17:20:42 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 17:20:51 executing program 4: syz_open_dev$vcsu(&(0x7f00000000c0), 0xce, 0x5a1080) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="02008000004000012e2f66696c653000"]) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x8, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:20:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 17:20:51 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) creat(&(0x7f0000000040)='./file0\x00', 0x0) 17:20:51 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 17:20:51 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:20:51 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:20:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000001c0)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x80}, {r1, 0x1009}, {r1, 0x4}, {r0, 0x4002}, {r2, 0x5004}, {r0, 0x100}], 0x6, 0xc7c) close_range(r0, r1, 0x0) 17:20:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x3, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:20:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="017c0c09faff084340b38e7794511046db945f5ddeb619331811a0f8cbdad82d5b20d045bd5c2f8c54410f069c66f65228a08d1219fcafec22bc9fdf3aa1b6021844d99171c820ffbe9eddcfc7cec1bc86ba0a0a0e1bbbd8549b5255df97ce7b48e3b43df2f337051fb3bbfdc707d0a5ad4e3c52d27c0db831380647bd35d900a84fd0a9053001a02b30dbb6217d11ecee2276c907107413cd0cd994133361048c79b5ffc8fab680ee6283cb9264b3b8dcf16bafa740fde8a4ec20715271a046528c0756320fbf775a2c4713cbdb671ed14c446c0c1535d42e01820075394028192921519f68d556"], 0x8) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2, 0xfffffffffffffffd}, 0x6) 17:20:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0xf, 0x0, 0x4}}) r2 = accept(r0, &(0x7f0000000140)=@caif=@rfm, &(0x7f00000001c0)=0x80) ioctl$sock_bt_hci(r2, 0x400448e1, &(0x7f0000000200)="31e6dbc5e0ad0dd3ae417d1611954562d8d71a2de7edd556e7341b417ec127a1a3ca4db940b958df7d63b0ab029c480cb98955e38c51dd7b931797c8d153ff299878315b5950871094a951f7424adff63a22cad848a201690f65716eb3cfc7e4505ad52ea225b15c8fb737e000684e326164588ee83f6d638ce0b078cb3a5281a37558c4a5696f693bd966ff88ceb3ea79df5a3f40fe1fa7a0dc5bfcbf4e5bbf6480cdde8394384806ea5e0c09a4d80e0a95122ac19523f1a210b9705c706adfb067cc85088f209e9505f2f3b7") ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f00000000c0)={0x1, 'veth1\x00', {}, 0x8}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f0000000100)) 17:20:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x6, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:20:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}) 17:20:51 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="b0dc844b30649afb68c3978100"]) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:20:51 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xfdfd, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:20:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4, 0x6}, 0x6) 17:20:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 17:20:51 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 17:20:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x8, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:20:51 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:20:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xb, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) 17:20:51 executing program 7: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000240)={"67857e70719440bed299a3c99914e1b8", r1, 0x0, {0x1000, 0xffffffff}, {0x6}, 0x6, [0x0, 0x0, 0xa, 0x1, 0xdf8, 0x7, 0x7, 0x4, 0x9, 0x100000001, 0x2, 0xfffffffffffffffe, 0x1, 0xf6d4, 0x6, 0x9844]}) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[@ANYBLOB="01"]) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400201, 0x10) statx(r2, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:20:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000008640)=0xfff, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000004800)={0x2, 0x0, @remote}, &(0x7f0000007f00)=0x10, 0x800) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f000000cec0)='geneve0\x00') ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000003d80)=ANY=[@ANYBLOB="0f12000000000000040000077700"/25]}) clock_gettime(0x0, &(0x7f00000085c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000008380)=[{{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/74, 0x4a}], 0x2}, 0x3}, {{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000240)=""/13, 0xd}, {&(0x7f0000000280)=""/192, 0xc0}, {&(0x7f0000000340)=""/36, 0x24}, {&(0x7f0000000380)=""/166, 0xa6}], 0x4, &(0x7f0000000480)=""/152, 0x98}, 0xfff}, {{&(0x7f0000000540)=@xdp, 0x80, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/62, 0x3e}, {&(0x7f0000000600)=""/140, 0x8c}, {&(0x7f00000006c0)=""/173, 0xad}, {&(0x7f0000000780)=""/130, 0x82}, {&(0x7f0000000840)=""/64, 0x40}, {&(0x7f0000000880)=""/186, 0xba}], 0x6, &(0x7f00000009c0)=""/235, 0xeb}, 0x3}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/111, 0x6f}, {&(0x7f0000001b40)=""/35, 0x23}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/106, 0x6a}, {&(0x7f0000002c00)=""/96, 0x60}], 0x6, &(0x7f0000002d00)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000003d00)=""/110, 0x6e}, {&(0x7f0000003d80)}, {&(0x7f0000003dc0)=""/204, 0xcc}, {&(0x7f0000003ec0)=""/182, 0xb6}, {&(0x7f0000003f80)=""/165, 0xa5}, {&(0x7f0000004040)=""/114, 0x72}], 0x6, &(0x7f0000004140)=""/135, 0x87}, 0x7}, {{&(0x7f0000004200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004380)=[{&(0x7f0000004280)=""/240, 0xf0}], 0x1, &(0x7f00000043c0)=""/3, 0x3}, 0x3}, {{&(0x7f0000004400)=@can, 0x80, &(0x7f00000045c0)=[{&(0x7f0000004480)=""/52, 0x34}, {&(0x7f00000044c0)=""/249, 0xfe}], 0x2, &(0x7f0000004600)=""/187, 0xbb}, 0x6}, {{&(0x7f00000046c0)=@alg, 0x80, &(0x7f0000006c00)=[{&(0x7f0000004740)=""/85, 0x55}, {&(0x7f000000ce40)=""/111, 0x6f}, {&(0x7f0000004840)=""/4096, 0x1000}, {&(0x7f0000005840)=""/110, 0x6e}, {&(0x7f00000058c0)=""/60, 0x3c}, {&(0x7f0000005900)=""/247, 0xf7}, {&(0x7f0000005a00)=""/4096, 0x1000}, {&(0x7f0000006a00)=""/132, 0x84}, {&(0x7f0000006ac0)=""/68, 0x44}, {&(0x7f0000006b40)=""/147, 0x93}], 0xa, &(0x7f0000006cc0)=""/4096, 0xfffffc3d}, 0xbc}, {{&(0x7f0000007cc0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000008200)=[{&(0x7f0000007d40)=""/41, 0x29}, {&(0x7f0000007d80)=""/251, 0xfb}, {&(0x7f0000007e80)=""/66, 0x42}, {&(0x7f00000047c0)=""/52, 0x34}, {&(0x7f0000007f40)=""/225, 0xe1}, {&(0x7f0000008040)=""/254, 0xfe}, {&(0x7f0000008140)=""/116, 0x74}, {&(0x7f00000081c0)=""/43, 0x2b}], 0x8, &(0x7f0000008280)=""/196, 0xc4}, 0x7f}], 0x9, 0x200, &(0x7f0000008600)={r3, r4+60000000}) recvmmsg(r0, &(0x7f000000cc80)=[{{&(0x7f0000008680)=@un=@abs, 0x80, &(0x7f0000008b80)=[{&(0x7f0000008700)=""/121, 0x79}, {&(0x7f0000008780)=""/151, 0x97}, {&(0x7f0000008840)=""/141, 0x8d}, {&(0x7f0000008900)=""/82, 0x52}, {&(0x7f0000008980)=""/255, 0xff}, {&(0x7f0000008a80)=""/238, 0xee}], 0x6}, 0x10001}, {{&(0x7f0000008c00)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000008e80)=[{&(0x7f0000008c80)=""/83, 0x53}, {&(0x7f0000008d00)=""/187, 0xbb}, {&(0x7f0000008dc0)=""/134, 0x86}], 0x3, &(0x7f0000008ec0)=""/46, 0x2e}, 0x1}, {{0x0, 0x0, &(0x7f000000a200)=[{&(0x7f0000008f00)=""/60, 0x3c}, {&(0x7f0000008f40)=""/4096, 0x1000}, {&(0x7f0000009f40)=""/141, 0x8d}, {&(0x7f000000a000)=""/224, 0xe0}, {&(0x7f000000a100)=""/14, 0xe}, {&(0x7f000000a140)=""/28, 0x1c}, {&(0x7f000000a180)=""/120, 0x78}], 0x7, &(0x7f000000a280)=""/4096, 0x1000}, 0x1}, {{&(0x7f000000b280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f000000b880)=[{&(0x7f000000b300)=""/162, 0xa2}, {&(0x7f000000b3c0)=""/103, 0x67}, {&(0x7f000000b440)=""/157, 0x9d}, {&(0x7f000000b500)=""/140, 0x8c}, {&(0x7f000000b5c0)=""/130, 0x82}, {&(0x7f000000b680)=""/52, 0x34}, {&(0x7f000000b6c0)=""/21, 0x15}, {&(0x7f000000b700)=""/244, 0xf4}, {&(0x7f000000b800)=""/85, 0x55}], 0x9}, 0x1ff}, {{&(0x7f000000b940)=@pppol2tp, 0x80, &(0x7f000000ba40)=[{&(0x7f000000b9c0)=""/111, 0x6f}], 0x1, &(0x7f000000ba80)=""/151, 0x97}, 0x9}, {{0x0, 0x0, &(0x7f000000bc40)=[{&(0x7f000000bb40)=""/247, 0xf7}], 0x1, &(0x7f000000bc80)=""/4096, 0x1000}, 0xfff}], 0x6, 0x40012001, &(0x7f000000ce00)) 17:20:51 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 17:20:51 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xfdfdffff, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:21:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @remote_oob_data_reply={{0x430, 0x26}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "cfb70cf54bb11a1486e211650d60ab64", "48358d434b65f7848372e48d257fcf09"}}}, 0x2a) 17:21:02 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 17:21:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}) 17:21:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:21:02 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:21:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, &(0x7f0000000040)="9341fe24f0e8cef37b37a7a14fece939fba7abd3f733565bfffc8f06afe9ada7df333cdf05bd3210a83a7c62dc389000272302ba1baae4c28d8182ee7e1e37789163bfc99840a6397dd3ae37f0cce0d2339ef434595bbe207cab27aa25d26260d63b1681eac81dc1fedab3342aa1d92bad43b3c7318c82464617752bc46a4eb9806dc2a665d5a5ec57327314e341f73e973cecac3effd300bfe5ed78b711dfe4a44efcde334e6d67f697ccdc082c8022346f34e8b5de90b2e2bb69e4ff00159b50259f") 17:21:02 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xfffffdfd, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:21:02 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="53971d303aebe8140d6dc8ef5df45d62e889b84216cfcddd2348541e81d2256e25b4134119569f42b1956d57ee872836f7e15091eb2eddb544dbf32bf1ae7d3b26d73a61315c00f4c7cf2985f5dcd99b356b2cb8b70d1e93ac68834800ab5e4afa32b0ff868cb206317f18669d0ff4d89d599d3989db2f64cdbd62fbe360c6e6902cef22af611dfe16194b0bbae74bd1339c138ea30dbb79667658ddc3b3ff6da060441733c20000007ee5b5ab521a010660912e6b8d05d5"]) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:21:02 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @set_reserved_lt_addr={{0xc74, 0x1}, {0x4}}}, 0x5) 17:21:02 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x2000) 17:21:02 executing program 4: prctl$PR_GET_THP_DISABLE(0x2a) prctl$PR_GET_THP_DISABLE(0x2a) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 17:21:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff}) 17:21:02 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_local_amp_assoc={{0x140a, 0x5}, {0xc9, 0x5}}}, 0x9) 17:21:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1004, 0xfffffffffffffffd}, 0x6) r1 = creat(&(0x7f0000005300)='./file0\x00', 0x100) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000005340)=""/65, &(0x7f00000053c0)=0x41) 17:21:02 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, 0x1) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r3, 0x0) getresgid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f00000003c0)) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0x40002, 0x0) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f00000001c0)) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x4ca802, 0x0) sendmsg$unix(r2, &(0x7f0000000500)={&(0x7f0000000240)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000002c0)="76696195a38f0733c4cc2f37405ccb0a500e7875d85a9ff358822ecad9983ceddf7b1da6ff484cf129993df0acd27fb43f578767b37321662a9875a863af519fa7d088da90669711b8f1119b798f09bd501c06aa07ced2d76a3ef6", 0x5b}], 0x1, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r3, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r4}}}, @rights={{0x30, 0x1, 0x1, [r1, r5, r6, r0, r1, r7, r1, r0]}}], 0x70, 0x40080}, 0x40) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) name_to_handle_at(r1, &(0x7f0000000080)='./file1\x00', &(0x7f0000000140)=@OVL_FILEID_V0={0x30, 0xfb, {0x0, 0xfb, 0x30, 0x0, 0x4, "df757aca65198b2978a5a86d9c338da0", "3957dffdcfee6e2c4f94c1e3e19cfa5df4fae4a0bf75d81e0df3dc"}}, &(0x7f0000000180), 0x1000) mkdirat(r0, &(0x7f0000000040)='./file0/file0\x00', 0x10) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:21:02 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xffffffff, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:21:02 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000280)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000040)=0x7) creat(&(0x7f0000000140)='./file0\x00', 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x24, 0x3}, 0x6) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000100)={0x2, 0x7f, "763012", 0x83, 0x80}) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) r4 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f00000001c0)) sendfile(r3, r4, &(0x7f0000000240), 0x7f) ioctl$CDROMCLOSETRAY(r2, 0x5319) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x2}, 0x6) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x10400, 0x16d) write$bt_hci(r1, &(0x7f00000001c0)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@any, "2b075c80ee1fbfdbe686aa7d0a923c33", "5166b3b13913f75c46005d31d7c6ff96", "12667f1747e5b28c856998ee74c73070", "5f8b82d20c99c59e323f27c97c209512"}}}, 0x4a) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000180)=0x3) [ 1952.050996] Bluetooth: hci2: command 0x0406 tx timeout [ 1954.098925] Bluetooth: hci2: command 0x0406 tx timeout 17:21:12 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:21:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0xd, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:21:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000000c0)={{r0}, 0x4, &(0x7f0000000080)=[0x4, 0x3, 0xe060, 0x7], 0x3, 0x2, [0x5, 0xff, 0x1, 0x6]}) 17:21:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}) 17:21:12 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) 17:21:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x20401, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x1, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f00000000c0)={0x5, [0x6, 0x10001], 0x720}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:21:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @pin_code_neg_reply={{0x40e, 0x6}, {@none}}}, 0xa) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x2, 0x4) 17:21:12 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000001c0)=0x1c) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) socket$nl_xfrm(0x10, 0x3, 0x6) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x6000) statx(r1, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:21:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x10, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:21:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = getpid() process_vm_readv(r1, &(0x7f0000001900)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) r2 = getpgid(0x0) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x2, 0x1f, "a5b9b3", 0x10, 0xff}) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f00000001c0)) kcmp(r1, r2, 0x2, r3, r0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) [ 1960.464344] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1960.465783] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1961.650888] Bluetooth: hci2: command 0x0406 tx timeout [ 1963.698896] Bluetooth: hci2: command 0x0406 tx timeout 17:21:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff}) 17:21:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) ioctl$sock_bt_hci(r1, 0x400448dc, &(0x7f0000000040)="c769d5fce2180ddbd705c955609195d202226da110673464") 17:21:21 executing program 4: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80000) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x105000, 0x0) fsync(r1) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0xae00, &(0x7f0000000100)=0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r3) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES64=r0, @ANYBLOB="67b2000000000a0000002100000005002000000000000c000500000000000000000009001f007068793000000000"], 0x34}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0x614, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040014}, 0x4800) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r4) 17:21:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:21:21 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:21:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0xa0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x6802, 0x1) r4 = pidfd_open(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) ioctl$sock_bt_hci(r2, 0x800448d4, &(0x7f0000000080)="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") ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000380)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:21:21 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xfdfd, 0x0, 0x0, 0x0}) 17:21:21 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/243, 0xf3}, {&(0x7f0000000140)=""/192, 0xc0}, {&(0x7f0000000340)=""/66, 0x42}], 0x3, &(0x7f0000000400)}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000017c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/73, 0x49}, {&(0x7f0000001540)=""/8, 0x8}, {&(0x7f0000001580)=""/183, 0xb7}, {&(0x7f0000001640)=""/208, 0xd0}, {&(0x7f0000001740)=""/120, 0x78}], 0x6, &(0x7f0000001840)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f0000001980), 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000001a00)=""/154, 0x9a}], 0x1, &(0x7f0000001b00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x3, 0x40000000, &(0x7f0000001c40)={0x0, 0x989680}) mount$cgroup2(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2002400, &(0x7f0000001c80)={[{@subsystem='freezer'}, {}, {@memory_localevents}, {@subsystem='freezer'}, {}, {@subsystem='blkio'}, {@memory_recursiveprot}], [{@uid_lt={'uid<', r0}}, {@fowner_gt={'fowner>', r1}}, {@permit_directio}]}) 17:21:21 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 17:21:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 17:21:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)=0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)=0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000240)) r5 = syz_open_procfs$userns(r4, &(0x7f0000000180)) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f00000001c0)) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRESHEX, @ANYRESOCT=r3]) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e2, &(0x7f0000000080)="7a84376be41fabfe0ccef8cf88a078e7f30b494a04cab77292e785c9e40c5f123b4a152a351765c317f3fff417630af1a7a817455e9392a82173e137fd7c6a89af8a2f586eb15d5222a9f74e9622d79aa4ad22aeb2e2f6043016de79e80446d1961a4382c46fc66854e00d8b370c22d58772d1f7f27a") r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x6802, 0x1) bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0x2, 0x2}, 0x6) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000100)={'team0\x00', {0x2, 0x0, @remote}}) 17:21:22 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0}) 17:21:22 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3, 0x6}}, './file0\x00'}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) 17:21:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x600, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:21:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}) 17:21:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x900, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:21:30 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) 17:21:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x0, 0x2}, 0x5) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000080)={{0xaa, 0x2}, {0x20, 0xff}, 0x7, 0x2, 0x4f}) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, 0x1) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x6802, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x7, 0x1}, 0x6) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x741c80, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x1, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_LABELS_MASK={0x8, 0x17, [0x1ff]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000080}, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:21:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 17:21:30 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0}) 17:21:30 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000000040)="53595a31414c4c00e60300000000000000680f650a000f00fc0000ffffffffff2932ffffff0000ffffffff46494c453000000000729dd72a33033029cc52823c4d0c922c200a0307e7f1ec05b8c2df9836b7835319485a2c0cffe59175f594a75507a9aaf34385408e83d0a7b0a202ce3f28106b", 0x74, 0x5fd}], 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="002d581167b87992e45f8c8687b779f58553f4eac03c2215342eba7184de08af3bb970b4867305060d4f1b1883ad5921056b4ef766df44c73c2677dca655bd171cbf62cd9114686fe2276660db0d398c50ce58db340aa0aca57d50fe06c845103b7630b7a3720b698152cac4868d225f7db6b4d58f4824c5c4c138c52cb53f55e86837035fe63bb7babf155fb295626f4afa504d1126650a8a81c52235dfbed007cb49c667889fda7e7723ca8a7da5397130773abc6e5d80e014945d22ec5e06f35aa1d58ececa3e1508000000000000006831a99650055faf3f6bfbd6a03da97378eaed888c3160ae23e4494e3096d491ca95357fa8b2f0f070591a69ef53951594297cc86fd0a766612abd2a1c12caaa1ebb257b09073997d0d468156655b58d97c59f9755a6856c4f7448138e784f34c7933111fc8eae14ace57b21010180888ca1d2117814fe715c796b5d881634cf14f1e2c388602ab263ad5c35278d88604c13a45c111323cd2d7bcfa94f0fae421ac17e3eaaa23d6cb035"]) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'ip6gretap0\x00', &(0x7f00000007c0)=@ethtool_rxnfc={0x32, 0x1, 0x4, {0x12, @ether_spec={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @local, 0x1}, {0x0, @multicast, 0x8, 0x3ff, [0x100, 0x7f]}, @sctp_ip4_spec={@remote, @dev={0xac, 0x14, 0x14, 0x10}, 0x4e21, 0x4e23, 0x1f}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, 0x0, 0x9, [0x80000001, 0x6]}, 0x1, 0x5}, 0x2, [0x1, 0x2]}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setgid(r3) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000300)='./file0\x00', 0x630, 0x2, &(0x7f0000000440)=[{&(0x7f0000000340)="a339499a78b2bd784a3191e9257b5c66967219617ee974803e9fbda2854cfd64ad36266e69ecd60a5a1b7a4c5c73fc00621723c261", 0x35, 0x4}, {&(0x7f0000000380)="ded1ec7750b08226d148ed1767f3219e870807bb363691f797c7e5d8a6b7d7f184898b9356df2df6071384b47935e6996c867f618592e81397063d055a8c35a83b37fe83ab9637ae336fe77565ab030bbba59ee3ff8d00ab3b6270097b7d294adb8f235f480f51827cb4ac81c9038df4ea7126059083a796a0d9bdf70a433b2ec58f78", 0x83, 0x2}], 0x200a, &(0x7f0000000540)={[{@nojoliet}, {@nojoliet}, {@block}, {@uid={'uid', 0x3d, r1}}, {@hide}, {@sbsector={'sbsector', 0x3d, 0xffffffffffff0000}}, {}, {@hide}, {@gid={'gid', 0x3d, r3}}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@audit}, {@fowner_eq={'fowner', 0x3d, r4}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/'}}]}) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x6, 0x0, &(0x7f0000000280), 0x4, &(0x7f00000002c0)={[{@cruft}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}]}) 17:21:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x1, 0x7, 0x4}) write$bt_hci(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="01070404c57978f9d913c5e0eae2e966a96c0459ca5324e9217ed5f686a1d9fc9ae7e1a01a7180b39a0d7c80f4f31d9fcf15ada869f32af8c073d3edd953a6cc896cc853a24d567fdd7393ba6083f0b729c6996b65d1f51c1dfc36ddd7cece497886f825c7309cf8c1fe2b41b266b379a6433d1d0d8818e3fb995ffe00d72a006e6e27d5ba3953787c56bd9ee41cf0bb99504d23dc32b87a233d"], 0x8) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000300)={r1, 0x8, 0xb0, 0x20000000009}) r5 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) poll(&(0x7f0000000200)=[{r3, 0x4000}, {r5, 0x14a}, {r3, 0x80}, {r2, 0xa15fcb352d375c3f}], 0x4, 0x3f5d) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = getpid() r8 = pidfd_open(r7, 0x0) copy_file_range(r8, 0x0, r6, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180)={0x0}) r10 = syz_io_uring_setup(0x3cfc, &(0x7f0000000240)={0x0, 0x20000000, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_PROBE(r10, 0x8, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000080)={r9, 0x2, r10, 0xa0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={r9, 0x0, r2, 0x7, 0x80000}) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x404000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000180)={r9, 0x0, r11, 0x7}) 17:21:30 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 17:21:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff0f}) 17:21:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0xd00, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:21:30 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 17:21:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_ext_scan_enable={{0x2042, 0x6}, {0xe6, 0x3, 0x10, 0xcc50}}}, 0xa) 17:21:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}) 17:21:30 executing program 4: accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14, 0xdb091908ee9fc79c) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08050000", @ANYRES16=0x0, @ANYBLOB="010026bd7000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="ec00028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000010038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000800000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040007000000"], 0x108}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) 17:21:39 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0xfdfd, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:21:39 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_conn_update={{0x2013, 0xe}, {0xc8, 0x7, 0x0, 0x0, 0xb002, 0x4, 0x401}}}, 0x12) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x31) 17:21:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_reply={{0x40b, 0x16}, {@none, "4c754a87f7e4be34218fde64150dbb96"}}}, 0x1a) 17:21:39 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0}) 17:21:39 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) 17:21:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}) 17:21:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000040)={0x3, 0x4a3, "97e397", 0x1, 0x1}) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000100)="f06f728d86cad3f2b25abab3d349d9b2d61eddce522a217ed9ff98cef4d8b975f8da55c57e4ad824dd10ccb0d7a837e0907a7d2404880b9030df842edd1ec0dffaa31785c1f9213e29a6f5615fc0fde6843dfbc7b20488ad58421b82e1fdf4027808e6f4236f127d8dcf4bb25eff7ca09d5add6ee07a9cd4442f03f3c97ab0191c2231ee1f43d98a931e1af5") 17:21:39 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x400, 0x2, &(0x7f0000000240)) futimesat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x77359400}}) 17:21:39 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0xffff, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:21:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)=ANY=[@ANYBLOB="d2ad52d858c260434d84cc010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) 17:21:39 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:21:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) 17:21:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = accept(r0, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, &(0x7f0000000100)=0x80) ioctl$sock_bt_hci(r1, 0x400448ca, &(0x7f0000000140)="e885be84b5af27474b232e395613bb710376dca9b3f0c4788f28e7fbcdb2b6a847224cbe06e744e1d71bcea76e71a00c75c45daadba19b4b14600d81d7b53f5e1dfcef61814fef6344ee03d7b8bfec124f483f39917c9bcc191e7d0c453c47400d95288bfa0b48ee91dbf45ce33add16e72a5d69a74ce8882d78f687f6532fe5f14c816a53f662c953bc1060624c3cd3617b1accc77235e3ff665ae4cec7e1423b67fdd0b8ec801158a02c5a") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @setup_sync_conn={{0x428, 0x11}, {0xc8, 0x1, 0x3, 0xff, 0x1, 0x1f, 0x4}}}, 0x15) 17:21:39 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x1fffe00, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:21:39 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:21:39 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000000040)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:21:39 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:21:39 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfffffff, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:21:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) 17:21:47 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)=@sco={0x1f, @none}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000140)='W', 0x1}, {&(0x7f0000000640)="3eb6860db32b903097350e7033ffc1ba8068ad5d47a7541dd7a2801ca63425d771933765d0c7b924106198181176258cf145a1c2dad4a4fd177825ea109f723caccad3566e218ae3c6fc5bb8eb25661d92936b309adc9c52363d76827358ac69df6d136191a1139b79b871aebe528fc223789e8592790b222a6d4eae9db400b05ea429975834ba63ece234f6b68e1e53b6094ffb42a44188674e17dafec6c180c0114732c1ce9854c8a9f12c5d6820c2e604af7f834f1f398445c6ef", 0xbc}, {&(0x7f0000000180)="f7bab6c5b0b5545ce765fef0c46369", 0xf}, {&(0x7f0000000340)="2b2c8549857818a513b59196d910a0a601a713800bb0a6e4fa3de10ecf43ba506a0ed1a78e5d115197300a7d89b7b41e19ec12bb3440b3f07daada6b8247238fe7fb3756ad565697bc419ae5dfc815de446cd34efc3fcd4e5d869ce1c14eedd7258147557c84a914a6fa646156097312a60007ea017b968c9783", 0x7a}, {&(0x7f00000003c0)="8170c27a9bc201db556a1be0b4acaf1b6a19630d8edc324fd6f057858877c66d4c9909d9c9328df60e0ea2fa968ec769a590ec0783ef738440b95f051f010f0e97faea592677755ad4aac5e0079af14e63435401cd62526d43d0178bb49424526567b5cfe0a4ec10c238b11cb9f2e87dcefcc1f985d4ca8ad67e3b10483be1a967af68047821fced29bc2f1231f72be667917022095a5795b694872014", 0x9d}], 0x5}, 0x4040) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x2, &(0x7f0000000500)) r1 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x20, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000600)={@local}, 0x14) 17:21:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:21:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x4}, 0x6) 17:21:47 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfdfd, 0x0, 0x0}) 17:21:47 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0xffffffffffffffff, 0x800, "33ec64", 0x40, 0x4}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x4, 0x2}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x105460, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x3}, 0x6) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x1, 0x4}, 0x6) 17:21:47 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0104cc1584ea4dc4de566f0f8f84ef4b3f330d6e0dd8f6aba5218c2999cb4be4c8c70230d44af88193ed0e2c2798f17f5895eac86da5744fa291f076061d67826b4f5afc58094b40067ab97627d51d021aa7ef9693e91a85dac93f1e79714a9e8491ad8039312b3fa5945cf36fcb0923c4d36ea8c7aee420546d02d98af4e3a51162adda4c3d69b7f071851d4d75497bbbd641dc3b93c57465daf14b5a3e4292d741db842677af561d4dcf74657a88e3ab4c017916f537726544de"], 0x5) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @user_passkey_reply={{0x42e, 0xa}, {@any, 0x8}}}, 0xe) 17:21:47 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 17:21:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x2, 0x0, 0x0, 0x0}) 17:21:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:21:47 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0}) 17:21:47 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='.\x00', 0x0, 0x4, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}, {&(0x7f0000000040)="f02a27f909a92ff7ea3887e9d2878dfe50c9dd5696565f38887097fe9c525f913bcbb49dd78a0d86338d0a350004166f634275a479574a3c1417f0", 0x3b, 0x400}, {&(0x7f0000000080)="13c8", 0x2, 0x4}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:21:48 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) r3 = dup(0xffffffffffffffff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_set_scan_enable={{0x200c, 0x2}, {0x7, 0x1}}}, 0x6) r6 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x10000) r7 = socket(0x9, 0x800, 0xfffffffd) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000240)={0x8001, 0x8001}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e23, @rand_addr=0x64010101}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e23, @remote}, 0x280, 0x0, 0x0, 0x0, 0xfffe, &(0x7f0000000280)='sit0\x00', 0x9, 0x9, 0x7}) ppoll(&(0x7f0000000100)=[{r7, 0x7004}, {r1, 0x1}, {r1, 0x600}, {r0, 0x5400}], 0x4, &(0x7f0000000180)={r8, r9+60000000}, &(0x7f0000000200)={[0x3f]}, 0x8) setsockopt$bt_hci_HCI_DATA_DIR(r6, 0x0, 0x1, &(0x7f00000000c0)=0xffff, 0x4) [ 1997.234979] Bluetooth: hci3: command 0x0406 tx timeout [ 1999.282942] Bluetooth: hci3: command 0x0406 tx timeout 17:21:57 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0005f4902a39269e5d8791231d8e41a01072965645514a1c3732e9a42e7b8a58a82a35445f437d85eaef17b61c521fc3aea97c415964b9f97fbc5a1a1335b8c0b6797a8bcf94147ce55ca9d11977059dbf1f396ddd9f5772d1109a5f5e3dd247a3b704e7afaa45124e"]) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:21:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x3, 0x0, 0x0, 0x0}) 17:21:57 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x794b, 0x4) r2 = accept(r1, 0x0, &(0x7f0000000080)) dup2(r1, r2) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) 17:21:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 17:21:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, r3) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x0, 0x7ff, '\x00', 0x0, 0x3}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:21:57 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0}) 17:21:57 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 17:21:57 executing program 5: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x6802, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) keyctl$search(0xa, 0x0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x0}, 0xfffffffffffffff9) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="e1b65a6ab5d7d6c4be39ba94b94bda52f243d2175a4b0404c17f9773349799aff0ffe4d325bba342ce2c007daa35f9a3c9522542aff3c2f07d0111bf32462ce8d193727c3da39dba4a3e5ba4d4af2eecd422a05e2854fb52bf8737381dcfc6684321a8207aab2267982042bf20a6ed981c", 0x71, r2) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:21:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 17:21:57 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 17:21:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x6, 0x0, 0x0, 0x0}) 17:21:57 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x137c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x1368, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x12, 0x4, "58efc690101716ec43509e1947dd"}, @ETHTOOL_A_BITSET_VALUE={0xa3, 0x4, "dbe941fbca8229d89c12761a9ced23ec627da660ffc6b42cd26cc99a9c6b43bd9d2b52d524ae950e0c78bfea4036b7bd13091a5b34222c2df16c8c09772816634960a6f5eed6d498b76ae1ea9d63a501ddf5de6932adf13edfa48596acc60c4be9a5caf895548b7c07f0a7723866615b55aa8450afb36c2de40cbaefac233a6c93a100cb11072f54466f511580d5493d2e91acf46d738a84db4ab21d3dd3bd"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "e49b2b89760587c8d5713bf35fc51c266e930a1f3328c7a8c5dfc74c229053adc2b7c747879a9be8614827e96b99293f9dac2d5962aafd3044bfe3cabeb69d1c53046ba85db87b8c5c8f5f903aff84684ccfe706729358640de2bd81d0d2a65fcd440bb2410cf89f2c7b62bdeebba3063e77ba41df999dc40377bef54cf0433bb874e1e7341f9fab828d0befebd7155f46c3742745a13b18621d5f8c28ac584ec92af14371047637a11c987a8d8ae340258e8eccfae79e0e601de57828b12b1294fd8feaa27ffc2a301dc5227aa4430604733215f82d3592d7e3407762e410d05f1066b0110df84a08261e2098ae9cf23fe6f03d40425a3d05f7a67eee06de141cfae030a39e0ba000845e2f694593440176be4818b8a6983b6cc78044aae153595737399bbd8170d2fa242790a0163e9dd96de499a75d4991de89814e2593a8fbf7c6418e1a6ab3a9bf4ab35ed3338378fcd6841f63553bab96fc3c2f92725578e72e454344dbfb1b11ca6d2b16e4f5229daaa86100b110b5e4efd0ffc6c7df118d7f0ca95949d588b9a546cc451ebb54d8f36a0db651bae82935495796e56e4e0d53843f5b8d7f690036a669ad1ffa2fa2c9cc2cb20041bacaf4348c03a5802e497bf04aa1479ed51449b8e5f24bc87ed7ba2c16f45520d8c62bd19a3a8f833cbc30461e13886ab4041032e3efee88f97673b010b702e621dcbfd68a7a983a56e4e8ce331fab8ceaf7368522739d8bdb2846cad66e97a0f58c01651f10b7cbab63d114f39d08554ba899ab8dff9a8e7793c4cada9b899278014f6a96e2b59613e6179b76469bcabd1b6365cc0143d07cb91f43a73216fa81aeee69a8444d181ea3864c89a72c2bace7895c024bb9e1e88306616e0beda0dbe35eecfe7ec3a7aceae43242fce81259ddce5b692806648c3ee6e2b6a6898d956c8364fc696272c0bf8051228843ad4a47ba6f49dbff323e3613c61898c09b6127810779100ded3e3b550ad925522cbc1c87e2f02f0ae3f8e88b5b8ae8654b16930a95a8292e043c60bfee4bb69fd7ade3b617a9b099d646b1e475e75a2beb87149039df3c3eb8b3ebbae5b487efa302b9564c606ebabec9e4b1e2b6d22d0ca9cf705e364e8631886a12e84ad298c8bdbbae7c0a6216bc3edd79ca41292fdf388c1ffc909ed0fa9edd43d5d7d3e691b99722e71933d4f57d042458ddd084a1c2639a516baa165fca5ceac2e2b2d3177fdfdd57ae3b894f8edcec9e042f3f67977367cd06e49f123820bca21fef7cc09bff0aee8d14bc60801ace7ed9a04679f1e25e1c81fdd0015b537f75fc205a334cdf20e23830ecda6e9643a0b478c3ee434684e901bc3178196c7c570bf393dcad2b94ac1d5e05308ae9e4b60b8a360811acec86a9b70f1b7078f534b4d3bdee04bcd9d6dbc7e482dc2fcbcca59d708801e22d0eae8e1fe8e49a3623d175d995ebbebafae7fe376e5a7cb8e798b4c8a96df7eee25005efe90844d5fb83fe710221f387555182170509439629dd9ff2718ee98c49b69ae653786f2398ddca93e4e449be03eb7f27ca70128d548cdaba076d786dac61b26d2bd965d25777895d6f98f8e8bdc50935f1881127c0317a52c9a38145fc67660734b260f1e03b0d858b0f311ff5cda07316a5fdeb973da882f4c1ea6aa0d043abd04798b544c4746b039554472a1ec4cd4cbb7b9727a8131bdce13a49c82685480b7ef5e2cd47e0a370d5cda28735ba9d1afb1fceeb63f8946fbf0c18922be105b11a6f1b27b2f39d8fe5df0756afaf1c9b5a575aabdb3d60535a8820d63f3d39a4415d80ed55e84bbad0bb5277eaadc05d1ef8604ebb91113abc6dc6340bf4ec75a9b087910ceae185c6f5d9de125ae9e7d2949f5fe3e94987952b89307e7f865365c832e2df7d77a055440036fa4f702d055ce40bf209b61bf974839d402a37dab52af842dc7b7ebdc1c3c5cd1b1c71360f8a48892aa495073f09571e0c4c3abe5b9bf97192c942108452fd505f7e2345122b2b33096bedbe182e2daf949d9a12f4e9d2c36b24393b8be4d283d4a53829d46bf1931549162d6730a6b3d5342398a9a53d79d97b2a9bbcbe91f804afd5d7e76b93e7fd87483be33d9ba96bd4cdd63ab8c2eedadfb82f6ecafaa5a7e84186cbe8edf4c7f96d8f7143fc885480b177eedacd57cc3671ad327b6a59072c18a83b85fd356518d78f0154a453331b25d9ca9b4f6b414f6ebf66501ae3921025765f8d66921c42f2f331b27c839621765a5fc7c85332a1d84e446f0164f7630163833095d77f4f0578828252aec4193854c73b80b681cc9fa1dab36f6a9c779892566d1190f7a525ecb4b0a615d30a057a7be486cb879ba7b6fac65fa8a023514401f2c4d711843bd0f9119bb3ea45d19cb536c309fd9d50d107d732192ebb670a25823e5f9d262ba7b4f891343641d0118ea7c3681c72b8ae264fed6bbc0b25acaad1656ef32b44cd1c02bbf95f0be48838d94bcff48212576c02336849deeb73d3254f00975cd47a1ad86bcbe853b8891e812db26932fd03e3b96e1a4c21cd6cf38501756ae81252e77b4491de4f37969d1d5245160988ad5ca4dcda0ed03521f99886b264d6bf2dcb7ee346c498c23fe67ab41986b9d2d8d239092b32b2bdd1b1b973a49193f533d6644641a1300843c0031eeabfca0ad534d4f93c5c8576564c288a3c4893065b0fa0e87a5f89ed4142deff1e7ad92aebe18e8fb96fbdf1d70e1a446ab5d1233ce183f7de282776b70d33d5a35488249015fa4795035a72d6f89941b613b3b849458a75724465961d351dc51adb1be3ed6a79c6ac50a778e09cd630ed0db279f7b87e6ef9b8f7c98147a342f838353cc81f19521a778251f6b3640c543be1412b869ab2c805e3f0e05ca6e8ba24d1985f5eed5c3f71207c8df40f1543fb7f5f64338a6d444f70ba761130ffdaf09483ce1179744941b4271f0130054fcc5e446cebf74d47aedba670d9bb8760921d062df7c5238b2e061e8e28d36f7b12f349431ccfc25dabe32aabab7f103fda024027ae40be4d6ebad943c9be39840397590c2ad9282d58825f40f29c94cc8cb6526dac29837a8b84ff4ccfa8711b606dcc5c9e5d1125dbe617519fd66e760c8d1f67ace3e8ef41298af9e8a20b54f35a00a71368a90baf3baf3a127950c382b25592fdb5f511e9dcf8ed8b47adbcc00007989d118e9ab65621f4c522a2b888b56874be17270f1c0a3bcb740c7b547c730635d9bbcd3c60491e062c776d0af18cb24902b8b4e1836dee16629b0586e050784c58ef21928042320a34b87832b5b42e86b420f6294f751d6448779ff3063561a0d0cd72d354253c5ff94c00f9d2dfb5b06f1e5f96269a4f7a9628bc1fbd6697210663910cdfe78f3d105685d9ae10f72cfd8aea0f7f784f1d31acf47a27ed5528a3f2d29c9ca55076611b044f8d8c44b5b006b337fd8ea358d9784ff9a24be41deb906f48134ec3e5c784c2f7d532469f96a88844d898b7c90b127b000a01c0f5ccf2248a1f4a6d4bfd078dcb1ffd30347c0da505912592fc629cb69856890e6532e630549ad61e3acb8a652896ebece9272dcafe57a82e2f0f098d578aacf14af8b5f54f3693c149fe49afd0dca1041c302050d097d22017a06e2e81beaad6f8d4772af8471a8a243328b6e1a2c43de3c61e9c723af923cee165a586e52fabe604221aae2119f764088b6fd82942fd81b923e7ea55a61bf0c305a13cdb140b3b4b21e6657a177aac207ee3e0f056c6f60e62a2022d5c75844d269981590d742ab76acf39803aef614e3087e50fabbc67a1173b1351c3c552a7666bd1add2f82fadfd4e6113a4fe7c1461d9e116a879dce30f1c9e4f31ddecb937ffd5eb1e76626e58053427024362481b5256034a296f368a3f9244f88d360a368b916278095a0ea53afe87f0658498f769424fa9f6ba8fb661bbd99a23eee33ca6c69662478a473952a5e46efacd067e8099e5a9139e2de0a43679c18daaeb0a9da32add491784da2cff0c460c3291f132b033143cd4aec98914d53f07156be0e576e2a95ddbf555b853c95cede8f1831e2e3b4da369fd2b3236b85de46b7184dfec4c2f78d73c875f483374ac4867311092c98e5d0df4ff036ad2692ddd472505c43069a31ee630f523455f67a93cc6584e358894284bad941eaf9d9e37d8ee248e1a704b8d3414ea90398d23be9fa7603eb16383684e0c9475fb621e95a5d0809648adc97f3f741bfb86df6fed423f10aee5e24b74ed596885ac7720750f3d9679435972cc620927dc38956fee520e86191da62eba61c1dc378c2b493ffce7f00b8e33c6e24afeff740a9d80ea72a6347bf9dc02de32d07d2b3e9c3705e0827f8a9ba69fdf90526ac480e60c8ab179d5bda05b12c5252adfbe259e426fcf4789893a41796fbade1e23ebf47ad2a0d0087b61ce938508c0530ffbf88cfcf27fdba8da2d989c1ff37a68ca7aa6e3b42054bc8e504ca9f88d58f61a538c4db696b2ce3d9f8731841ff84a845d8d6005fd07a7896e4c693c82a32f1c682e480fe24c3e7de06e984b655bb538a602a7c347c64dd118f205b01cfe4037557de6c440e43b52bc9fce8a34720f8c760e3e1389b170ec0ea4d8e2e1774957fb63bd14dbc06abb5a0c02debc93e8bf9cd96ea69722a525ffc014e39e1c78a0fee71655bee034eb16d6dbb7af22efdb8ba85ea0d5c906b40710aaf1669d4ea6e7893a22727b1f9a6f3e70363804a52d82fe802132d882d4c415d669d0e5afbd0e1d16c13c0a3735aab5206a5f2867ae8b23db66388ad93230fc08261b9af8be0fe25d0f46969edea959dabe5b66387ef6c5937b7219c051eecbc67cc429f429572492ed52c37f99d768d183258d643d27851d3ee846e6e27a7435fb0d34cd898b73f940ea74e951e74a41bef5d56c8c0a5020cb2d11888c214a6cc47d9c14121c12732ba234137d4af02f8c0f6432b4e49de517d4d3adc9b0c993cd8d9f4478ba535564184ee2d9902c8a08d704bca8bea5a0836d2af6f2508257b072db42855ed4b15dca253d16708cf429ce2f5605c4bc87beb5fd91986e7e24e84c251e52fa204d2f206c12b47e874f1f0d62232e15d5cb7933206001e6e32cc99ebdb11d4ef70ebdb7ab1bdc479078df90ad1e442dfc7025485627de646417e14797b493f8ca1fc35744190df81347072690a4953ffa540443c28f7ae0878caa3c87a4d5b6fba515fafcb466f1cd5c19e789aadb36e2d50bc20f64daab9d8dfb63e3b30380975565c87181285cea2f141a311fc1035e13c94965d5b7e46c53011205d1641807429fa6d5ebb524be6a5f3fe6668eb800c6947f5ec264c9f4e8bce5067f854131547bcaa2104d51e24eb3c6d724a2061b58536bc0d75026f9690cac072125d707b482d0aba8d761e8cebd0b2713e9880597f92317f75609763c10270f66ab83aa80c7a2f04f4d373c09595a5bb195603834d7e0905920585669309656ba1f91d3e9a73a9ddcba0ee9c2e85c877d4df6bd9da5e05dd11b9c5c7416fc094e1c2c43522f057c413eb4401cc6043773403b576af58c5df9211da305aea575368c1e791cc67f625cffb951bec4aee2b526d3361cd7ed7cd1787cc7372dff9747b9f84da31216fa450f90cc08ed23cb923e265bfe8ef0a1a4b22465104aae12f02fa3616d5960e7437f11bf2aaf684b83c72aab82b5b86727d981eb3b2e893310beb24aed1958fff89acc9a770d4a4943a70b5e703dc2b0858ac186dd5be79361af15ff5c43c75411be9b68b85ee219932b75f8d2"}, @ETHTOOL_A_BITSET_BITS={0x134, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x58e}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\'^@+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'vfat\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'vfat\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'vfat\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x83\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9a}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}]}, @ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'vfat\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '[/](\x8c/)(\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'vfat\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'vfat\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xb2, 0x4, "f99c15d224dc82eecf525b497f384329bfc2587cc49708849012f2d1751505bab4bb31160616f647fb80af16f3b37cfb17f85c2b22970aa0a043e1862986a40d4e2c54d3ac6943ac6775a2635d7cf0d9d8c5da9217f1dbcf9fda2453f2a496cc86fac150f6e03c14bbb90fc4107d5a396712f859d50f64782368fd9d4ac543d33802dd2ada4f5e42b19c94a6c578bbd4009022e47949ee50d664b32bb7529def4087a7e7219673a371063002aa84"}]}]}, 0x137c}, 0x1, 0x0, 0x0, 0x20044800}, 0x8000) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r1, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:21:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 17:21:57 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg(r0, &(0x7f0000002580)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002480)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/103, 0x67}, {&(0x7f0000001140)=""/16, 0x10}, {&(0x7f0000001180)=""/35, 0x23}, {&(0x7f00000011c0)=""/114, 0x72}, {&(0x7f0000001240)=""/72, 0x48}, {&(0x7f00000012c0)=""/183, 0xb7}, {&(0x7f0000001380)=""/214, 0xd6}, {&(0x7f0000001480)=""/4096, 0x1000}], 0x9, &(0x7f0000002540)}, 0x10020) bind$bt_hci(r1, &(0x7f0000002540)={0x1f, 0xffffffffffffffff, 0x3}, 0x0) 17:21:57 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0}) 17:21:57 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4, 0xfffffffffffffffd}, 0x6) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4) 17:21:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x8, 0x0, 0x0, 0x0}) 17:22:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x9, 0x0, 0x0, 0x0}) 17:22:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0xffffffffffffffee) 17:22:10 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:22:10 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000001b40)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000240)=""/243, 0xf3}, {&(0x7f00000001c0)=""/59, 0x3b}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/166, 0xa6}, {&(0x7f0000000500)=""/119, 0x77}, {&(0x7f0000000580)=""/163, 0xa3}], 0x6, &(0x7f00000006c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000800)=""/242, 0xf2}, {&(0x7f0000000900)}, {&(0x7f0000000940)=""/162, 0xa2}, {&(0x7f0000000a00)=""/186, 0xba}, {&(0x7f0000000ac0)=""/87, 0x57}, {&(0x7f0000000b40)=""/116, 0x74}, {&(0x7f0000000bc0)=""/120, 0x78}], 0x7, &(0x7f0000000cc0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000dc0)=""/45, 0x2d}, {&(0x7f0000000e00)=""/187, 0xbb}, {&(0x7f0000000ec0)=""/103, 0x67}, {&(0x7f0000000f40)=""/13, 0xd}, {&(0x7f0000000f80)=""/17, 0x11}, {&(0x7f0000000fc0)=""/16, 0x10}, {&(0x7f0000001000)=""/173, 0xad}, {&(0x7f00000010c0)=""/22, 0x16}, {&(0x7f0000001100)=""/28, 0x1c}], 0x9, &(0x7f0000001200)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001240)=@abs, 0x6e, &(0x7f0000001800)=[{&(0x7f00000012c0)=""/208, 0xd0}, {&(0x7f00000013c0)=""/142, 0x8e}, {&(0x7f0000001480)=""/33, 0x21}, {&(0x7f00000014c0)=""/226, 0xe2}, {&(0x7f00000015c0)=""/41, 0x29}, {&(0x7f0000001600)=""/110, 0x6e}, {&(0x7f0000001680)=""/77, 0x4d}, {&(0x7f0000001700)=""/189, 0xbd}, {&(0x7f00000017c0)=""/64, 0x40}], 0x9, &(0x7f00000018c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}], 0x4, 0x40000040, &(0x7f0000001b00)={0x0, 0x3938700}) lsetxattr$security_ima(&(0x7f0000000900)='./file0\x00', &(0x7f0000001c40), &(0x7f0000001c80)=@v2={0x5, 0x1, 0xc, 0x4, 0xcc, "9c7e5aeca114757902a426849ee8042bae43e8f90e15b77f3ec3f69e35775beb238d2775e28efe57d8bb5a2626adfd4f0e3bfc72542656787f1ca68247726283a33f7ed76f69e7ccf03aeefe95ea13212589758b5195ff0163bb79e2932eaa71ed421976c9b3a258aa6a369406d59f2d580a80ae674a944465204e88c50fe2791b507709260f1cc694114399dd8d36b784dabc76d8d32df1fd950890d3858b6b5f20be188bcbbe7d7e7f21a3d4ca92ab6658f7b5429915cd49df9140c30f84e0505f15a986d0341e322f462a"}, 0xd5, 0x2) mount$bind(&(0x7f0000001d80)='./file0\x00', &(0x7f0000001dc0)='./file0\x00', &(0x7f0000001e00), 0x200001, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xd9, 0x7, 0x6, 0x7, 0x0, 0x1000, 0x1000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x5, 0x46}, 0x20, 0x6, 0x1, 0x2, 0x1, 0x80000001, 0xff, 0x0, 0x4, 0x0, 0x8}, r2, 0x7, r1, 0x8) 17:22:10 executing program 4: setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000040)="35eccb6014b2cf1e40400a74fb57e939dc0c4f57174f657ea420d9ffa895d046370fec25850768c0c85c13aaeb04733d7d47409474e739a6044459cb9b02bbd73857e82e7cb9fc5a4b9d9b43c26ddad4ca6f9a4e93741c01ea1157e5e1e08ea5307c4138794ba659c61ff875346a6f2529f12efebbeb61f0e0e3eda195c83e9264ad51a014bee5fac713b5ec637d848942b5de98257b3722d02cc901afe63cc13a83") 17:22:10 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x8, 0x181640) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x1, 0x1, 0x80, 0x7}) 17:22:10 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) 17:22:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) 17:22:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="00020000000000002e2f66696c653000"]) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x2}, 0x6) 17:22:11 executing program 4: socketpair(0x2, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$802154_dgram(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14, &(0x7f0000000100)={&(0x7f00000000c0)="30229519a96e4495ca3dd536bde88aef6650a52cbf8c33d0da78404650965322e6f199430bf0b8f88c7d3bb590b42d", 0x2f}, 0x1, 0x0, 0x0, 0x4881}, 0x4000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:22:11 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xfdfd, 0x0}) 17:22:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0xff6f) 17:22:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xd, 0x0, 0x0, 0x0}) 17:22:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x7fff, &(0x7f0000000080)=0x2) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:22:11 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:22:11 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f0000000040)='./file0\x00', 0x1000, 0x100, &(0x7f0000000340)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x402000, 0x31, 0x8}, 0x18) 17:22:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 17:22:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000040)="af38aec3e7301f73deeba2b0a9b95158a3128ad2e066ab3e617d3f837462350200a46d50d0dfdbf9b729e1cc40d5068d212b6e45a9a70ccb5de4bc54d265ef4bf41f3be19847afd0e3230411d2e36b971a228c4e4067fb67606d21c724070c3153c6d5a75a6442c6f7eac83c8b0ccd12b1fda9d327a8ea052401c7d9a68a2b9a14759d07c5cb2741f58eb6fb09fc85c0d228a4a83d2ad9e08c7dd30e6ca1a2f20a8354963fa2e54563e082828a77b58c2ec0fda8decb5315a00046cd") r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6) 17:22:11 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0}) 17:22:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x10, 0x0, 0x0, 0x0}) 17:22:11 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 17:22:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x1, @write_current_iac_lap={{0xc3a, 0x7}, {0x6, "c73887c8b8a6"}}}, 0xb) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:22:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x300, 0x0, 0x0, 0x0}) 17:22:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) 17:22:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 17:22:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10043, 0x2a) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:22:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 17:22:20 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0}) 17:22:20 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 17:22:20 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x600, 0x0, 0x0, 0x0}) 17:22:20 executing program 7: r0 = syz_io_uring_complete(0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000180)="8c3f") r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x6) statx(r1, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:22:20 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x900, 0x0, 0x0, 0x0}) 17:22:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}) 17:22:20 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="5280410214166dacb0a71998275e3548593de3944efb35318ee7b381713a36646b8c513bc3fdde917ecc74c191bbdb62dad263b7801e50236de755bb21dd0d9659ded328f87e17e2b71c736765ad3b3d08a8ce6fe79e155841e40194622f22ac5ac43d30f3e48033433b308d307928b3ed0671305398b48390dbfb70a04b5a3acac2a6940f2935d6fc603d6b2f83b1c10d51001ac2dfad0f8083d319c8a263d1507b89e8042e313a478d45384a7579d5030dd74c39e3db97cec303a023d1f5"]) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x101040, 0x42) 17:22:20 executing program 5: sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:22:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) 17:22:20 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 17:22:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x1}, 0x6) 17:22:30 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0}) 17:22:30 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x6802, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) 17:22:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xd00, 0x0, 0x0, 0x0}) 17:22:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd}) 17:22:30 executing program 5: keyctl$instantiate(0xc, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="757064617465206563767972746673207472757365643a7b006e21248e5f8b481acdf821948952405f0a668ae186fbc04fc8f54220c605ad6e3c6ce420d5a4f9e7e849"], 0x1a, 0xfffffffffffffffa) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x207}, 0xffffffffffffff0d) 17:22:30 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) 17:22:30 executing program 7: r0 = syz_usb_connect$cdc_ncm(0x1, 0x98, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0xf0, 0x60, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "237c9326"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8, 0x7, 0x6}, {0x6, 0x24, 0x1a, 0xeb, 0x32}, [@obex={0x5, 0x24, 0x15, 0x5}, @obex={0x5, 0x24, 0x15, 0x7ff}, @dmm={0x7, 0x24, 0x14, 0x6eb4, 0x8}, @obex={0x5, 0x24, 0x15, 0xfff}, @mbim_extended={0x8, 0x24, 0x1c, 0x26e5, 0x0, 0xff}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x7, 0xffff}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xc9, 0x0, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x9, 0x34}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x91, 0x40, 0x3}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x9, 0xf7, 0xa7, 0x10, 0x7}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x455}}, {0x57, &(0x7f0000000340)=@string={0x57, 0x3, "d8e46e421a45b1442b2ce6574ad08dbe075b71db3744768e3984ed1dde8e3a1e45f11eb92e692a4c63489b8ff009b788729b6cfc72bf17d11061a2d7713dcf75094eb220133520431ac5e04a0a4174142eef2feb53"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x425}}, {0x6a, &(0x7f0000000440)=@string={0x6a, 0x3, "f4fa6f1f16c6f1f13b6787ba23dac2018b6ddc93a3c42fb27e374d96343d10ee6d8cf569db764622638c6b27e60990ab88766ba0e1364a2aaa1d1e316468286ca1d2d15fb7ea7913a6b9279d9fc2537de8bb53ae8f66bdb6f45c27fd10c10ce394a927001ba058b2"}}]}) syz_usb_ep_read(r0, 0x20, 0xa1, &(0x7f0000000540)=""/161) syz_usb_ep_write(0xffffffffffffffff, 0x80, 0x5e, &(0x7f0000000600)="4605b51c324edf3273ac8184b86b95b980a4eef29715869f9f5790f8cf766e5928ac95e8f3dc27da9d11151507f1436efc76158948dd805db5d503edd44e3d8d8280e26728cb8ccf7a81fed33655ecd8b533758680b0677a201d1f00e141") syz_usb_ep_write(r0, 0x0, 0x4b, &(0x7f0000000280)="8429b437bffa5346dde061451dfac79be513412355f8a65bec77012e483684e02bb24425813f3ac4ef716362cde2e5dcb6003c006e05f92f3e081e6677517ac9a791efa5885cae5d6ed136") r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r1, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x1}}) syz_usb_ep_write(r2, 0x0, 0x1c, &(0x7f0000000300)="c75c41af1bfeed9f290fe7c9c6587f8566ae0820998e5f829d5a89eb") r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x1}}) syz_usb_control_io$printer(r3, &(0x7f00000007c0)={0x14, &(0x7f0000000680)={0x20, 0x22, 0x3f, {0x3f, 0x3, "a74158f7dc25fa8a0974117292ba29e0631ce4a3778f2d702893e9ff4f320ec833d68d3c7d760a94601503dfd0b80ab5ed1f2a9f2fc75e6f6d0cabe2a9"}}, &(0x7f0000000700)={0x0, 0x3, 0xb3, @string={0xb3, 0x3, "faee3b5bd35e4cae0e2f17eb2e1f4f7883494bae5ffb88baecf43efea6845e22f167426a6a712c583edadb13c6b96856af5d16ed8a714a042ea358c31890cb03cd8ed33c8262f5d566f7bdd21c90562fc8e006814fc4a0b2e0cc1e574d7de8c5402ed2d0aa4a6d5568cbc37279e97c75d0040f862abfc6091e27c684ce3f766ae88329c4ae15556abbd52e1b733194142a8d5ee0920bcfa526e36bf4df9c73fb383cf3d69710542465e91ae3ef0b966734"}}}, &(0x7f0000000a80)={0x34, &(0x7f0000000800)={0x40, 0x0, 0x5c, "04332cb4c6f99945c081ac10dfc0d97dadc03a3fc5244a00be9009bde6343afb8a2441c272453b85327361fb9605eb14a59f3139267860c986c5e500161802ea5c54feacc0fdeee76320db0dba796bca2b49b3b55a316af3a47c15a1"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000900)={0x20, 0x0, 0xde, {0xdc, "9ce883189853c0f6a2d104c26d30f1825d044abfef8554b6462b0d5e818f6249f1a1b26e8ee1357886a13aceba37b0cc505d3ee899b0a4deda4d7cc73b4be6028b14b429545a15ad481681a01545c02aad98d6a97d786c0a103ec8fce2f264acd43a95d8195bead053c33a8fe0746019a1cb257bbf2b6424a7082232f2276f16c6a2a99416259649e9bbd71737c7db318648692add848a4ce69b4142686e2e67b5790ffc40760ecdf6c3fead247236c34f2f08139f89351c42fc84180b19a1144024c7f831486f8288ef5b82a08dcf2c5abfd09486f8a70b185b0993"}}, &(0x7f0000000a00)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000000a40)={0x20, 0x0, 0x1, 0x4}}) 17:22:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x3, 0x2}, 0x6) [ 2037.877222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2037.878175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2037.881119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2037.882379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2037.884078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2037.885494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 17:22:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 17:22:30 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd}) 17:22:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt(r0, 0x3, 0x5, &(0x7f0000000040)="ea60f945e8d1ce61c2e55979b2e29ea93f2e44b478903d774204ce2f299619fa7443d113fca70971efa7c7f0563a57e9954e63d07a10c3b99e12bd7e18ecec9f02402f892d3cd8653d5de059afd748ab414c0515945ef4aecc995f5cbd6a7776db8ed7c32a44066357fc5baeda60068f2dfd66ab6858d4324b280c9090cb9341b101dc81ad653c6da112814ac6289798b1306e7328c5881e118742a4f1f66f14f779021912f8e577324ad6e550e6a942b2f18f4223b289f0522403dfff4cf92ccb0bc71d91f6392c65e6a7f33e147e1c9e64c57cc23287648f3e3181387d95931cb418f55edfb6c5c7f5d7e69e09001bcdb85a1105e5", 0xf6) r1 = dup2(r0, r0) bind$bt_hci(r1, &(0x7f0000000140), 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/pcmcia_rsrc', 0x100, 0x22) 17:22:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 17:22:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xfdfd, 0x0, 0x0, 0x0}) [ 2038.390910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2038.393412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2038.402151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2038.404068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2038.408669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2038.410629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 17:22:40 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000005c0)='./file0/file0\x00', 0x1000, 0x100, &(0x7f0000002640)) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0/file0\x00', 0x4b02, 0x4, &(0x7f0000000480)=[{&(0x7f0000000140)="5ba2cb57fc71b6a54211e868f3c1a9ec1b91e0cc2a4d321f470f57ce45f5612dbd5575dca57e5676f36bcdee9c0d2b9a6073a3ccd23066c1fc0e2d06e6befb68486d07e829282826fcdbc2c306d3f7ca135badb27c06148b81ec12429eff0589ac9d62e6ce1b68262b526d2cf693502dfead69e55eb75e2700bcf1d64ac6115f9d410b165b2d05ae8971f793da4fe2e4f9f711ffebd777bb8c8262a41d44fc4abae21459f95b50", 0xa7, 0x3}, {&(0x7f0000000240)="8e7cfddd3bb7e1f7511f88acc27adcf1997d4a7c44339d60aaa1dd1724dabfc8f7ab19a695a443a8bf7bc5f392f4b1351674a3bfa01d5fdc9c61f4c8e17d85ffdab659c6c9f5ccfc3bb7e092", 0x4c, 0x4}, {&(0x7f00000002c0)="6b45aed446c306b4245579057073d5db959e557c3e3329eb7e961bdb54bd3ff207a5866c5c875898a8d8dd942bf57846bf40d131a42b1773e152310f771ae614cc3ecf1585e5c1f26701d282fb5f74523c4d95fb57db0c9e3c3b9a6da3bb7ae2acaf6ea91fd7184dee1c04c4fb0350489b23b69d15467585ade2d076e835039b8d8f9f5de45999f5baf4a2a29a234f4736f2b0f5357b8175c5bcdd956663970e4e5126ac34edf95ca2c823cfcaddd3f3385a8064099919f2055e67dc4d8723551738268834ba8bae682123947ebcbef90aa8a9584568ccd3d03f93f0856a", 0xde, 0x7f}, {&(0x7f00000003c0)="93fcba6e26387d7f9f80442b694678dda35d370fe43a79e9b3993dd8c3c2c03a64050412f39ed9dcc57ef47aca1643481ec03ef78e45953bcd0cde0dd7042d8eab8b0b664735148dd478ff4d9185b791eb14c82a529d5d584b37591058238b24ace2af50f5e196adad15df4a535615c016aedb688871a2bb161d944906b2fc1e1e87a42e5b168fd70bc378dabbdb3e1f27a4bd62f926", 0x96, 0x800}], 0x800, &(0x7f0000000500)={[{@session={'session', 0x3d, 0x20}}], [{@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}, {@appraise}, {@hash}, {@context={'context', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, '-#'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}) 17:22:40 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 17:22:40 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 17:22:40 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 17:22:40 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x80000, 0x0, 0x0, 0x0}) 17:22:40 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}) 17:22:40 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x2, 0x5, "a8ffcf", 0x9, 0x80}) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000040)) 17:22:40 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x3, 0x2}, 0x6) 17:22:40 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400891e9, &(0x7f0000000740)="317091c5dd6a51ff49d426ad7fac71aab8d5cacf8c72fb8c2a34987088716ff87c2aa8ef0758208a0e9b14b66f7ee0bc5c1e9a3b13601248b4921e3804187ab08872ab7ac529dd10395399c194874c956649258e53e38f6726c090008db69c3500716fce0a9ca2aa30dca3829c65499ce42a66bb9c02c4402dff12f195e575c866cd72453617f168203342d59785a1cd2ff2285d2a7d404431da42b7d34e5c783a700c7f21618bb652cd02b00347b5c1cbcb8c726a4278bd4aa61ef1b9f5c371d4f2dfc029927d97e021a7e30e970c29") sendmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @multicast1}, 0x0, 0x4, 0x1, 0x1}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000000c0)="454d1a6ed2f5b0a675314fad2c1a26533398abdeae7e162b8ed8bb58f5b0d775ba82088e9107c0c380240031d978ef1779dfc6b54c9bb27a6589c0aca13e9fe61f8a73e10be91e02eecd0a0c07c3d8c2ce0a0ebf81a139681b11b327ea4593a0399496e01b529cc575f7974dae23e671790c67e8baeed23591dbb086a993d79a8fcb0a7f1096cbf2b4449fbfa5bd6fc88fcea5b5096ada95bef0038ea030a173346047348e711dc5e67651d6a8ccfe91034ea94e0ab11949b5905cdced59c96b05f46919ad03f0aa1b2e724e69", 0xcd}, {&(0x7f00000001c0)="c021764972898aecea1a819189df47e20b906bfe1924beee5988d4ded191982aeb006ccad28290d512f9907aee5a7d7b90cfcc6c2614bc596e46394952f85d77d57dd3f6771b4e3535e86053117b587354992a0ad0d95cffad9f106900c52864adbdb2578db97c5c5a4e5b058622c79dc5b2d1aa56866cf61f7e4167f80ea032f84ef036ae21f712a9eb43651fe2dc94", 0x90}, {&(0x7f0000000280)="3f98305904a75af0d929d425247112911b721a4f6a58406c4be0b1d88f9aad0622a6f32cc3a816f0054b", 0x2a}, {&(0x7f00000002c0)="924115c1ad59946f7f511a1f98b8a2b7d262431c2f62fe", 0x17}, {&(0x7f0000000300)="69605a48dd86b6ebe81a95bd71c6e17346ab98be1e88c06f04dc2b55a95877c1f253caeca7399c664b9a3b96b9b66250a1df9ef697a346dba68dc03afd128ab17a6f23d13a4284e7c19d84a0764ec0c705b1e3f7a4bdb824b9148b", 0x5b}, {&(0x7f0000000380)="061ce965dc7a131f66a6f8158bf196dba6e956e37f0b44cc3b7174257f2e6725050c014502bf18bc13581f4d6019837bceaa089bda2b8902da6686b46b8dd9f74e4a65391b1a960470cec460a88c8e9492ddca2ebc8edce58013bcc22c5fc76d43f898", 0x63}, {&(0x7f0000000400)}, {&(0x7f0000000440)="50ffd8bdaf5ce7dc63b2e58a0049dfa779a0222333ded08e597145c4cfc9516e606353bd596e924d68c29243eb", 0x2d}], 0x8, &(0x7f0000000500)=[{0xf8, 0x101, 0x0, "707a70c2e022c4bd68ca19d71b8253a5ede9171b4dcb036d3183e7bd78c1f5cf7f3098952758becbfd8a3b3327479ce6a2863604a7e65c3107886efa010f469c0ebf2672eb91b0f89bcfbb038d3f1aa0c4456ea2cb1c4f0ea2655cc4129ead7ee189a70b6173c3c5a43e9af363f9d6bfa5e61913d0c0a5187c9cb20a1838c0094f9b05eeb1bbe7af091a5140879d8b2449a2244d7e5639721e07dc04a389da2c7256750247305937fc63ebf0dec45494989526d43d3bea7565e6fcdacc261c271905b263540934de7a94fd56a44baaebd8b98aa9575bcfb219af0987edccb2aab265f7"}, {0x100, 0x103, 0x4, "5ef8688c6d8e03400bb9d9294f8d108ed0bba0e31e8d49923cd142a2de056e80ef7e05bf041f91ec20bbf5176c7174c8f5ab28cb115b29ac683e1dbc9bdb272ac3a1a6a70eca459c49feb2f8c13251242c934bc1b919771a6894b5c57708bf1521a8ff3fc69189b507c012f66137166dee99637d4bfc598be5b10c806847cf0bbe376c9c6a4a170f3e9e186ffcb55be6b6c3c366df83805f6afb3bd232fe02abf8d6b6a1f3e1e0953e7b21ac1ca502baf7c05c5e8c260b0e1cdbdae86cc7a409546cd2d12f0e99bb5bbc4d1b5f6a08d944a1cfa7b7fbcccc52c6dc0b408de631afa6276be64124d87988"}], 0x1f8}, 0x200400c0) recvfrom(r0, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@l2={0x1f, 0xffff, @any, 0x80, 0x2}, 0x80) r1 = getpid() perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x8, 0x1, 0x7f, 0x4, 0x0, 0x8001, 0x76320, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8, 0x10001}, 0x8511, 0x2, 0x1000, 0x7, 0xfffffffffffffe01, 0x214d, 0xfff, 0x0, 0x2, 0x0, 0x1ff}, r1, 0x10, 0xffffffffffffffff, 0x2) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0x4, 0x3}, 0x6) 17:22:40 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}) 17:22:40 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd}) 17:22:40 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x1000000, 0x0, 0x0, 0x0}) 17:22:40 executing program 4: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000001c0)) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000140)=0x4) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x700, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x5) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x8, 0x6, 0x101}, 0x14}}, 0x10) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:22:40 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f0000000040)='./file0\x00', 0xc00, 0x400, &(0x7f0000002640)) 17:22:40 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) 17:22:40 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x2000000, 0x0, 0x0, 0x0}) 17:22:40 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}) 17:22:40 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f00000000c0)="0f68bd52e8075b4d337f8bb8903d53aa9805583949547207ed90e9f1722d1885edccea9f9cb294f4f25d0ca2bedcd22e477fe22203e9347e68770848dad7f8d22dafdccd870286ec0cb3f7144ed5bf2bca4f79b59ecddd706bf4cf273be6") 17:22:40 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}) 17:22:40 executing program 7: ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x488040, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg1\x00'}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r2, 0x0, r2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000340)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6, r4}) sendto$packet(r1, &(0x7f0000000540)="9b5daab74d74965f692de6ac59cd914d2a2d54b61f152c260d93da6bb68811fefaca937518f2c3b391165dcae56b27e1d9fb467e51b473108739dbe79cb4a27f83185581deb149e4364333d7c70081518def9e6f80e68eaa6c600aff1b3384abf6f8889861b50e6ee7b48598bda9f443d6c01355a909e41a73b32afab397d1f7656c061323a229aaed04d90c5d0272a86126259c24930cbc3fe242b5724e30a73d2f2f1613605d5a7c378051753c42e2060ef42691f3b5163852df69b8", 0xbd, 0x24000000, &(0x7f0000000280)={0x11, 0x1, 0x0, 0x1, 0x80, 0x6, @random="3e5ad500aea0"}, 0x14) r6 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0049a605d5"]) statx(r6, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x6802, 0x1) r8 = pidfd_getfd(r7, r6, 0x0) recvmsg$unix(r8, &(0x7f0000000500)={&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000004c0)}, 0x60) recvfrom$packet(r7, &(0x7f0000000300)=""/228, 0xe4, 0x20, &(0x7f0000000400)={0x11, 0xef, 0x0, 0x1, 0x6}, 0x14) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180), 0x40000, 0x0) 17:22:40 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x3000000, 0x0, 0x0, 0x0}) 17:22:40 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}) [ 2048.555619] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 2048.558444] Bluetooth: hci2: Opcode 0x0401 failed: -4 17:22:41 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'bridge0\x00'}) 17:22:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff}) [ 2049.778926] Bluetooth: hci2: command 0x0406 tx timeout [ 2051.826964] Bluetooth: hci2: command 0x0406 tx timeout 17:22:51 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 17:22:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) r3 = dup(0xffffffffffffffff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_set_scan_enable={{0x200c, 0x2}, {0x7, 0x1}}}, 0x6) r6 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x10000) r7 = socket(0x9, 0x800, 0xfffffffd) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000240)={0x8001, 0x8001}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e23, @rand_addr=0x64010101}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e23, @remote}, 0x280, 0x0, 0x0, 0x0, 0xfffe, &(0x7f0000000280)='sit0\x00', 0x9, 0x9, 0x7}) ppoll(&(0x7f0000000100)=[{r7, 0x7004}, {r1, 0x1}, {r1, 0x600}, {r0, 0x5400}], 0x4, &(0x7f0000000180)={r8, r9+60000000}, &(0x7f0000000200)={[0x3f]}, 0x8) setsockopt$bt_hci_HCI_DATA_DIR(r6, 0x0, 0x1, &(0x7f00000000c0)=0xffff, 0x4) 17:22:51 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = inotify_init() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000000)=[{r0}, {r1}], 0x2, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="45cd3c6a15f000"]) statx(r2, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:22:51 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:22:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x6000000, 0x0, 0x0, 0x0}) 17:22:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) ioctl$sock_bt_hci(r1, 0x800448ec, &(0x7f0000000040)="a9fde01f4b7e8d7cd06d0787c74bf2e8dd2fd0e8063801718c534eb88fb14fecb0df1ae4dd4ad209397d6c4c0a3eccd6dcdef76e5f8ac92faf76a419f84124f80fcbc754fc355a16f858842156dfead8b60d61a961f9baf1752db537d81a3f45cee83cf327ca19af3850ce9e1a7661eaeda5390bc6a2c45b837416723323b4e40514e93906f530d8e9784d2a84adb0a6e3e3a9bb73b3c65d5b650c592fc576b0b6383fecdb87744c3fa69857e3ed7864ea1b07fe847846a5b470883c4128a43146f9655a51286bd9174931cba16dda16c10dbb0eb2fe00b1f6bfbdab8bbe04e503264fa8817ed9d674852b0bae40cc0e9a44927b30fa6fe5e9e1ef65d3d282f378378b8c04ae3cf70831a3737898abaddff3b7c19399f2a26dd667b0f8514e56a3c2529b4d7937ed7c554b2508d5059e4eda1dcb490e174749be9570b2addcae92c1e73e35afcb62e0bed28766f0ed51ce7e212e935c467a58a106a107c12f69bb25857d71e054d6fecce5158d2f77c07590d86ded5485637780c7e23cbbc53c8b8c7ee45c5bf10a2e5707e62df8ccdf2dc2997fa7858bbafb2a8340f83a9765a852e47a8b77263cfd25621e4a98d6b2cd1b7394dbd6e3daab8c40003eb21cf93475a8b7c71f28cb0ad578d679f39a020f47efef1d08ec9797ea6061cd080f1bd2a884f2826c355a5020f613fd62e65c742d9b52d186719910d53309713f41503cfe91c2963b5e78ef0b6dfb18a01f921cc269a4bf9a7c99f22c941f3173acdd78ad6608823d9e52daa01ad872d6d9e90feb34bed55bee1b24275bc055a3078272f6de09f9172fa144c70842ba4cd295d655e1dd6516b21629866d323624b6964faf9d6dac20d816e76029cdedfaa90d988b0e8cb57351e0294c8475c6dd1c27a08f74b5b8c05dbfe1e3cdd2210991a11a82fbde6e268ba181d271002851f0dcaaf51695b5019b83127f4bd91fe2124d720afc467345699b69b35c3a388adea49b0a0f9b5ff5851b2b7a2a5a77a09d099f6e806e5a8b7aab3f2148acf92dd89f16f980f5e54de1d510e415e50e7eaff3ff7b64f8a649c990c05c7926d974129c95b41a76da46d3b040a92d17f7e9a42c6b43fd163adce013e97748af23bdd1658b821dbacd2a7493e224f8358d0c896dea33bb190682ef9411974ca59677bcdd105f93b53cae3163a15033090022b2a1c704720f0369fc1882342ddc143d3f4acc62e2e58ba20eba47ccf9e6cbe1d2958a067030079ec246ed4f10211e3b504ccfeb265b05ec60ce3674718c4bcc7b6a01bd5bbec3cf07a67d76537f80fdb7236301c1318d39886b5f5359d7f115a3bf5acc23a9f1fb7bf4241920539a4e4ccd73f8876e26c71c67674fc8ea69af4b53347377fcefe559fc9cf35c67153ddc28961e52ddca4c96a803470775a4c60c0662af78287b7007dcff93240d1fa5e45845e3f5ef70cc86c7b6227ac4beaf26e0b80948f54dbe217e3c80a96cc913e3d8a113fbc53562a7ebe8624ec1a3bec0e0ad7b713ac3b9c20b7e4285c53e9d275b166f263e853cdd3fb508ab4a077cd3300babb1653cae484139d45aa4494272efa058c6084a61e1eb24f030467c33cf5c0d3607a180073b01e7dcec2b5a77bf4b42f00ef26ea5f09de7072782f8f825603804a9fbb6f40884f59134c730524fed61e0c654d5f3714c6e86b90ecb52928e7844df27484050b1f2cd8690fca7acf26ef83ad0cac91162544de60e4d445ce45881843de178a845b4ecc48fc786d6ebe2a92830bc4ca43ae06ac57e70a6def6ab91fdc00355ed187b754730c795a2b7fb78452d2916f31a5c4b6c44f031f2576241296934d967f07a135db34e9d54c1eac7a4a8ebd3da4cf967db210c671c834721815651af0ee70c300e47ee7c5ed6da2e715687a48fd2ef93279344ed9026d67a67cc874fcd9e9c2e2e85bf1a1969e425228cab0f5e88ea67eb518eed6edd339e6e01e52a75cb636ca053034d995bde2af0d4cbf49b1e25df117937e3e5a97ffe0a15755d3a023434acbdfab4d535bfcbb9e6aae757a9d4289a35e9e2f416f2d4efcabdd20bf4809b62cd4b0b9c5ff15a2a6bc956fa987eecb35171cf3c36f8de28416e8d10ffb2656f05499e912cd07fdd8a2a4146deba26790f5b42f1d8a93d68ec00c4f322b134e9457b28c942f86dc38afa8cc14c6bd54c38456a54fc831f223628a40b17337c9f07933cff664feab050305141cf3f43fdc7639af0893562c3938d44d0774056cef05ee990b3a199ff4ca2e758122e14a6b30efb83c0865256ecc68e818f6514a146392845d60acc69d7980e1683c116f2ec34e5fad1722d1b6f4acc8e9a0994d3b56571c610f12e63a3638c155d2db12d4412c32e46d65064b38e8dff1960aba54f165f3ffb19a53c8f51539def0ae07eb43acee5e1e17131f694f229917e2ecde4785bd1946eb9dc3a2c9fbe30e5b0e2df011b67aa95f8fcaa720558e2746b170dc9301a7f2707d197e65f2af706d9e868fe6ffec930797b937e32c53c6feeeda962aa3053b970923ddf711061a86a42b5980eb64286d8940bcb4b3eb419f26549e0f25dc2f5bdefec003a075f651a8bed4cef2157e8d42791c8d996f6bb03d2c44d3986d3325d9280df317eb0e105d43e973de03c449e5902a18fffd48776446d48b0b27e39cb7f7f02baa9dddad25991782b7fa81834359eb100fe91971eca418a88a7e59916d5064324198702e4b5e01d82f50d317385b4537274228e3bf91bc0709a087447a6ec581d60efad883fe93da78616758171c4de1ef2391d38653dce5437c90603fddc05f37a14f86a805bd2e7390433ddbac164a16b219c8504e62d9a7646d486ccc79e0e237dc185e44ff1aeda997d311c47f520625f2bb297e21cd4a5bd95e960257bd6dc9a650a24d78c56c12327a93a500feb6591fd0b388ec0356ea79db1435d62c5e3bca0cd43d7191d2855a11eff5e7a1039b9c4d51fd48bde1bf1d7c55e52d20fb7501c34132e073f122f119b4a9245d35430e4cb4b5066617fd8a90729548f63dc6ba9d4af8ad89cad369e5c02a8240dd1dc5a7adaecce7792cf93c88466eff3cf3dd594e52ddc7a11dc475caa624a139c59ddd0d514c9ad3596a630bf279cac85a33635ee07164431215bca336d7ad9acc5044fcf7811837d90e2de590ad2f5a2b35010259a23c926a9f7227247a8938e84a8cc20e5cc98f72b3396801e4e7aff98d3caca17a95be14d9639395b559e28842966d5fbae31a9f43fbac06d9b92106d3faa67d2b002b5872ec6e0f517a5675ac832ef9d325eeb2fdd03e366f0cd1b4b42e0ea39aa28df03a0995cb663baa85827b7db0c07339c4f5c73b5e5bda4083f93ad3e1d448aa74b6b5259dd84984b273f0ade75d93892cca0a3d829035634fc9a2780e35f1da406b03d13f49fcd18f55d0e1e8f7c355fa2f38e4902e22c6d37f6e56727dcefcf7aa3bb594d3f85e98a41a7593367624d443ad9dd8a94c9c47d5fb20f6c51a9e97a35003361b69c800c197aa337b8c9c26aecda4a362723b687985de148a4912b95c4187d0b0ad08639d11a52af22cbaebfc0cc28b56cc21b90685eac3d68c1a6299eb84bd491c29c8ed4cde68b88446455953c259278b58ed60c684f12a334471e76b17e9f8c8dcc2da5a5e83526e8cbbc8a2ca3e5e892b95fc5498dc1846c631e0c97c548085befb8d147c618d4216eb4896c61fac4863869de0c07cdbae2cd1a8079baab061f0334f22a8f5af1ea473d35cb78d5b46032b13264e16acb9a5bb975daf4e81569e73207d2b54118cdc541b8f49a75ba8389b8c3a1e537ada48b01c0f3ecc3131ce5320d16baf205f7e1a73f020d2c5cf7d606bf54d6617279915fe0856b225de8f9a848aa0276ced18292825f55c2c493072ae1c9047bd366ff61c7ef826e44f90011017249afbf3660be5d497f6cffd90e5bceb7482e2a34a8f61c6a2f73c9081bf9613d7276eb9d584d5a5de0e8801665d2c3c2d4fccfb965bf20c9aaa06b247b9225dbe1619620c52afdcfbb50942f401d3ecb3f0bff4d91c3defd734c797716622ce52f5a5a7b9897b48db613c207f3c3829b5e7074b56e04edc3c7b799ec0a61cfb308b5fe64d70dd441e7553d168c43de59fd405da771760415c1907a1bbbfbe3210114c9b6ca38bd5941e4b630b42a12f20c5f69f8d165db14aafe2f62dbb1709faeed6b4af4e87476d9aa671b5b79df4b33ff7dac434cf998e091c4a81f16109ecaaf9905463102b8af6f7891e594cfc88e619472d733d09554f590dd896539ff5981b03309f3ef10f1659ab131f6f66899269f8fb0037ab796bff2e8644f0327ebaf907879e3cff9f4c43d8d857bab70aac420d5188e4d8ebf978401237f4d66f98dc69224529a6affd1c322ab13ef062385f2c1b68a437adbc5201a691238907b62d7ad0c529007b3e00e94077fc0d823971c00a5364f006147d65e95c7906826e7b4d80b04411255406c27c217ca1fc6abea46834dbe52e074e30a4432e8c68f23282963fba2a7fbaa22337b814471e385802cd5d7d082a14a40a6e98572d80ae081d8ac5bd23c0f6e8467ccb9be776c69d0386475612f21dfc96a504ea46fa625e9c4ea7918726d94f2f759527af108964af5bebb0cf7a1c4d860c4ec67850aa72e59b38f276a0a0f781a954c061f3706253b34cae6dbd3058180e43e0cb05b9e1d8036ef0687e3f3b6c9ee24a4da895e2922d759683b1c51ad3636ce25ade77895a3689aeea351832a8b2b054851e1cdf3c5f3eb411dd843cbc433ad8639b6e3bb528014d3c2e6da9e2e7637ca80bfa5977fa328bdbf7b7ce82a8e68bc334f0f35754dff9430e8e15e3b31588a6565f6a01a982bcdebb2c164e8bae8f3ab805cccaf71801c79a375a3232783fe28d28e70baec42f916f374213995a76774cb3d0118c38a648796635133696b20d1487f95efdc991e9af3a85b8fc99b6dc62c6bcda74539b648855ff656ad2ea8a1af03cc5b3bee8fd902e7afaef33d747c05d24d142e7b144edc57f58d8bd6df73e5739f00be8ea3d268397254cb05ecb50da2501a23a940bf853a21ddf9c38a40afd84b61cd3088e618a89cd6dfffc26e8922636f54da1217aa94e392cb0597b40f7bea6dd6382f4298e160b3f16404a1d29201fcb8e3fb338373f5fcbb2916205f56736c56facb6a81d9c2037e795eb52f4f1e11627321b284b80a6ea539d867f76fe44d039b8d53c76ce282ba7ebf84f22b88c56c3396ccbd76e310fca9ee1731731e8239b5fbf83ec48f0c355f137a8aa93c7d0c7c49acf6020928b856808a0be83ea64f138ac5ce6cc2e7fbf9d347b8fd57a0f31eab74da60d01ea793bb347117b250f4038c97bc686a3b8996f537c5d72c3057de968a84251b2b2f38af570186fe22ebfffeb5981cfdde12fdafea53664c4b5b90cbb240eda13e0e897d591edddbb58f85d8629f4fa5712c9d333065999d36dae5a2f67a0ba0f6285af0cb04d418222a60d1b3db83f5a77f328ba15b3ed49efcfea3395211fbf600f7833ca8f8ce35c69ebfcf3805f3d93bc7da71bf7dd6a95b5c82af5e38a2b1272253e7145871f56acaae3e0431ef403dcbe7c0df8d134de7f23fded7f1f80e8703d0a152e6f07cb0ae506f10883a17bd83e3a5fbedc69f960d77e2d2ddf3064300e0d2202229e0a5ca3bc529df2c98917589d09a405d8ba6e34373a72da7f340865e393e5818f0cbc1095e363f488a069a3f3c913dc624d1117c2f0c608c92be88bfc8c63591187250f589ffa55fb0d396ac7b94039fc2ac50") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffbf, 0x4}, 0x6) 17:22:51 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd}) 17:22:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}) 17:22:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff}) 17:22:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 17:22:52 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}) 17:22:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x9000000, 0x0, 0x0, 0x0}) 17:22:52 executing program 7: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) mq_open(&(0x7f0000000080)='vfat\x00', 0x80, 0x4, &(0x7f0000000140)={0x100000000, 0x3ff, 0x2, 0xfffffffffffffff8}) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000000240)) 17:23:02 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) r3 = dup(0xffffffffffffffff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_set_scan_enable={{0x200c, 0x2}, {0x7, 0x1}}}, 0x6) r6 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x10000) r7 = socket(0x9, 0x800, 0xfffffffd) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000240)={0x8001, 0x8001}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e23, @rand_addr=0x64010101}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e23, @remote}, 0x280, 0x0, 0x0, 0x0, 0xfffe, &(0x7f0000000280)='sit0\x00', 0x9, 0x9, 0x7}) ppoll(&(0x7f0000000100)=[{r7, 0x7004}, {r1, 0x1}, {r1, 0x600}, {r0, 0x5400}], 0x4, &(0x7f0000000180)={r8, r9+60000000}, &(0x7f0000000200)={[0x3f]}, 0x8) setsockopt$bt_hci_HCI_DATA_DIR(r6, 0x0, 0x1, &(0x7f00000000c0)=0xffff, 0x4) 17:23:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) write$bt_hci(r1, &(0x7f0000000040)={0x1, @reject_conn_req={{0x40a, 0x7}, {@any, 0x9}}}, 0xb) 17:23:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000040)=0x8, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:23:02 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:23:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 17:23:02 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd}) 17:23:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xd000000, 0x0, 0x0, 0x0}) 17:23:02 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d85dd49c7707cf29d8000"]) name_to_handle_at(r0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000140)=@FILEID_NILFS_WITH_PARENT={0x20, 0x62, {0x3, 0x4, 0x18ce, 0x7, 0x1}}, &(0x7f0000000180), 0x1000) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:23:02 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[@ANYBLOB]) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:23:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) accept4(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}}}, &(0x7f00000000c0)=0x80, 0x800) 17:23:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x10000000, 0x0, 0x0, 0x0}) 17:23:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x0, 0x7, 0x1, 0x4, "bd80d05a6d70926cc67af8febd72ad8ebcccf0e93e0568b77bceb9513c527c"}}}, 0x27) 17:23:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}) 17:23:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) r3 = dup(0xffffffffffffffff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_set_scan_enable={{0x200c, 0x2}, {0x7, 0x1}}}, 0x6) r6 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x10000) r7 = socket(0x9, 0x800, 0xfffffffd) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000240)={0x8001, 0x8001}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e23, @rand_addr=0x64010101}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e23, @remote}, 0x280, 0x0, 0x0, 0x0, 0xfffe, &(0x7f0000000280)='sit0\x00', 0x9, 0x9, 0x7}) ppoll(&(0x7f0000000100)=[{r7, 0x7004}, {r1, 0x1}, {r1, 0x600}, {r0, 0x5400}], 0x4, &(0x7f0000000180)={r8, r9+60000000}, &(0x7f0000000200)={[0x3f]}, 0x8) setsockopt$bt_hci_HCI_DATA_DIR(r6, 0x0, 0x1, &(0x7f00000000c0)=0xffff, 0x4) 17:23:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x663c911e637a5485, &(0x7f0000000080)="4a9c256cdd8eb819a94bb604b6658351107ac535ac093bbad93ff725e33036cb13a230940c8587ec4f7348d20e9bec3ae2d95f33f453") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, 0x1) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x57}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x84010}, 0x20044084) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) write$bt_hci(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="30ad2f18e695c393dc46fb1ea133780bf483766c8299b9412b4665acbcf42f9828f7a556e2c8ae43696d8f12c38cbbf6d7ed"], 0x6) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r5) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="44090878c80081cb5b2db9e5762f5186fc0dfbdc291047ba3de50caca84f2cbe4c6d0a492f68301056bc13"], 0x6) 17:23:12 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 17:23:12 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[@ANYBLOB='\x00']) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x800, 0x100, &(0x7f0000002640)) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r1, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) setfsgid(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setgid(r4) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x7, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000140)="d09bdcf18f2c3a4b40d7c30b291fa9965e2c5c9a8367705dd7876205a857ef5c94587d19761ee73cc65937f25cb8e8dbed320e722b567e91d24899bcb03613fddf51a668", 0x44, 0xf689}, {&(0x7f00000005c0)="627e02ad0c870b5517a97e0a191c15dfcf1a622cd879d15cae09572936f74b78a3d3d4be0ca857adcc7d84f14dafe6bb07b93c81be24c5a780c8d3313f585b0aaea39652262d81ae4e", 0x49}], 0x3940840, &(0x7f0000000380)={[{@session={'session', 0x3d, 0x42}}, {@check_strict}, {@hide}, {@mode={'mode', 0x3d, 0xffff}}, {@map_normal}, {@cruft}, {@map_acorn}, {@check_relaxed}, {@nojoliet}, {@gid={'gid', 0x3d, r4}}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@euid_eq={'euid', 0x3d, r1}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@measure}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, '%'}}]}) 17:23:12 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 17:23:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f00000001c0)="d785f47f55d8853079a368043bdc2da3b1db81fff81ebe9c1813fb3816345adf77405e6ce76a3844f1341c52977eeb48c02024df544074e6890d491644a773563937a7c7f292a1db39e53fa130d0c73194612e7249d70194e922943f866d156afc7929b400f09fcacc561884c002203a0d9466c56055f85c615a73249a161926c695186548f4be2ad5561b") ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8, 0x5}}, './file0\x00'}) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0xa262, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0xffffffffffffff39, 0x400) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000080)=0x9, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 17:23:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xf5ffffff, 0x0, 0x0, 0x0}) 17:23:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 17:23:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff0f}) 17:23:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f00000000c0)="49f3c2594057b22fcdfae1682a6d9fe99a17a4f68baaa2c6a7507d105a6896d5228b2c8eb4866a847d6267d5e003cfd3d618b959f2bad8ec42b0b52b6f56fade00fd6a1eb2eb") r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x0) dup2(r0, r1) 17:23:22 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 17:23:22 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) r3 = dup(0xffffffffffffffff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_set_scan_enable={{0x200c, 0x2}, {0x7, 0x1}}}, 0x6) syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x10000) r6 = socket(0x9, 0x800, 0xfffffffd) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000240)={0x8001, 0x8001}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e23, @rand_addr=0x64010101}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e23, @remote}, 0x280, 0x0, 0x0, 0x0, 0xfffe, &(0x7f0000000280)='sit0\x00', 0x9, 0x9, 0x7}) ppoll(&(0x7f0000000100)=[{r6, 0x7004}, {r1, 0x1}, {r1, 0x600}, {r0, 0x5400}], 0x4, &(0x7f0000000180)={r7, r8+60000000}, &(0x7f0000000200)={[0x3f]}, 0x8) 17:23:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4, 0x1}, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0xf, 0x0, 0x4}}) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000080)=0x2) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:23:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000040)=0x100000000) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3, 0x1}, 0x6) 17:23:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}) 17:23:22 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 17:23:22 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x400000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="d04a77e552578a70e8b1443ef481c74756a17eb7f31c202ca6ee71663d35ddd8efcb8e021c6b24a346d4771ee1d71fbb2150ef1ca9647cf5fe94bcfdee606155f475de33c34a44f5a7a416e51d0e784be1b8cf48b6585da2927a921104f05fc2bc712d397c8b3b29c8bc3db42a2ec6362e8aca9e"]) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2, 0xa, &(0x7f0000000880)=[{&(0x7f0000000240)="6fceae0edf2673f0813b508d390ae3174ba8d0f614cf4d51c9ae4aa795f34d0c54846dc7982e91f5b06a3f7fee8668ea7b8f47515947e11078f96ac6069f5e90a41847aaf5fe648615bdecf01b9b6d5a42f063f9f7b7b74918a77bcc958e25e6227f7345d011b5ad0fdc2a9f64d930b5f085ab5039c99212787f51a6ebf00c18d71d6cc3288b31d6d59e5cd579a6dfcc2e86ea07a6aada958174ec912b203493aab3586db4b04831036d9da7f917a6e460b65076b0fdff58b5dec9fcd1b8401e464db0b1f43473dff7250b3d994e40ff97b39b9adf809eb4b9173e5bac537ef7cd26b59965cd049e27623d9961a84991a867020fba3c", 0xf6, 0x4}, {&(0x7f0000000140)="eb12a64dddab468fb25b01bd72c749478771cd3e5b25ba450ea2a8b61725e30ea69e79c576594d3729394f9e117f795ba0e8f35aca0d4a3d2eddedda098a5c33b42c65946cc34f4cbd7bda31d096927f655f345aa17eaee672e2182919710b0dde16a2afa7ec58e6e144dfe9e02db9c1032bce02f0bf312a28309c9ba9a1316dec89dac9ecfca71d75a2b316279aea2eebdb93928dfd2f79610ac18f0f0de3ec4447c425a3f81680cc027b0277a4fccbed73873b65a3e84d", 0xb8}, {&(0x7f0000000340)="8d05984a1d4fbd7f2193053842c7ebd0a7a6d184a45cee8198961b6fcd7de70c0b6a1901e9bbaebde5341001e39d83a8811b426c0ecf8f736aef2ceee240ffadf861cc6343b5a21e48b2dff387156f28fb900d8ffe958f1f5b4c174ceb7c0acdb9", 0x61, 0x5}, {&(0x7f00000003c0)="a787cf5b990ce45cb48c0ae318dcde34d09e88b015bdccc8f01e70bff08421dffba43e3b6cfef0b1e410560a3ec7698c42466c82ee125ccf0309b05ed55a63645479a7ab15f0f6614b809e002733330d8e3387c2ad0e10805370b85760bc1de107db2890b8d5d70569103d55eefe851bad81eda0898d7c80abda37f32edde7207f7cff297e599e8ab5889cf0ce38151b227d43398bf1d39607aeaa73f903a0ef6a507448c2e596b1e73855d213b06235fe7239f1284fdfc3ee146af910d633c420f46b9516ad49", 0xfffffffffffffd8e, 0x101}, {&(0x7f00000004c0)="31d2c53c2217312d5bd988f71c570093e00797250689255f6349d77d60430e57fc12afb0acc734b675ab4102c3727486", 0x30, 0x80}, {&(0x7f0000000500)="5459e06ebb3fbcdfe6e27caf1703b283692570b11c7a06970e37e9595e4f7530f22e2bfcb97867181709f7267fa43e8e9056e5bc9ac827fe0a8fb30a5fdf9b2a28c3f56c77021a7c7a5db551b469bbd8a5cdd6296183d11f0eade36395026a4a61bbf6863ea9f8ea91385c44e43a6b712c6089126ad9b6ec43136d05e9c2d72129", 0x81, 0x8}, {&(0x7f00000005c0)="f1880c0895fc4e31a1e182d11318fffb4f37053db6c0d687c7e0d59b2a9f3b990c82e2354cbf5f9de3e07247b663785d985d68dd04e27251eb", 0x39, 0x9}, {&(0x7f0000000600)="2ed857d95d716eb98c0cf28cae3e52a7d5cf912a969f6c93ffc2d6e9fce52668c4f14b06c7eab264fc93f5cc1ec22fea024bf1789897db5d4730e55fb1f40d1c60d6572e8338870c9b56429b1d7925f0f0e8c61932c084cdc5d5343f4090e4f5c3fd1a2a580b48d6fc5671e19fd8c11af80b900d96a79fce9c1f557b4bba247315577a30152d995a2b17e180703faaa14bd5f6c136101e48e288e5b208965470a7bfc2a1305ef289bb21ab7aa81da49c29cda45a35961f7bc8379f517cf61cfd59c6017f61b8c5e1d1885d78ca754a8ae09d9d", 0xd3, 0x1}, {&(0x7f0000000700)="08b60420a6338312e4144e3614463f1e4191b90ba616c29c3bb70c522870db38ce71ccd210fa4b38e6f659848d4c88df72c1423a173fd25856b078e727f7567cdb2ba2ca61d0eb0f5a83fd2ca71b3d73bbd989eb5077dc0db3309c79d1eabacea7a52f53c0a124f37341585c85f0c74141bc9275150287f6ec057799cb7d7d5b0205eb4dabf7b62c0ade4a601c5e56bcf28b40d470ec8ce903a34fb76f91ae79b6", 0xa1, 0x2}, {&(0x7f00000007c0)="b758414c1d4b0f9fe3c8efd2ff8bfdc6f2a6abb7aeedb30c869dc02c1e9084c8850ec4e993876d5339022c0e2d62a8911821f1a68ee5b7e71d65f20f36bba621f423fe7424b0d1adf3391aa3f4278c0cd0605ffde3eea5c7f5d47be4f1c4e795ef5267baceec9ca6cb6a39d640b4e067767a16b981750135a57f3bb2f6384f1ee120f277c455d0644b384b83bf540db83ed0b831a6b7d4a64583b7537408c7df60ecacc719c8d8d9", 0xa8, 0x1}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='\',vfat\x00,vfat\x00,vfat\x00,euid<', @ANYRESDEC=r2, @ANYBLOB="2c7375626a5f757365723d76666174002c61756469742c736d61636b6673726f6f743d76666174002c005625628502b1758258d4008e46e773a308a6d8"]) 17:23:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xf6ffffff, 0x0, 0x0, 0x0}) 17:23:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}) 17:23:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xfcffffff, 0x0, 0x0, 0x0}) 17:23:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x3) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000040)="f885") r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000140)="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") 17:23:22 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x6000000, 0x0, 0x0, 0x0}) 17:23:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0xfffffffffffffffd}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 17:23:22 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) 17:23:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xfdfd0000, 0x0, 0x0, 0x0}) 17:23:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0104cc1584ea4dc4de566f0f8f84ef4b3f330d6e0dd8f6aba5218c2999cb4be4c8c70230d44af88193ed0e2c2798f17f5895eac86da5744fa291f076061d67826b4f5afc58094b40067ab97627d51d021aa7ef9693e91a85dac93f1e79714a9e8491ad8039312b3fa5945cf36fcb0923c4d36ea8c7aee420546d02d98af4e3a51162adda4c3d69b7f071851d4d75497bbbd641dc3b93c57465daf14b5a3e4292d741db842677af561d4dcf74657a88e3ab4c017916f537726544de"], 0x5) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @user_passkey_reply={{0x42e, 0xa}, {@any, 0x8}}}, 0xe) 17:23:22 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) [ 2092.084894] Bluetooth: hci3: command 0x0406 tx timeout 17:23:33 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0104cc1584ea4dc4de566f0f8f84ef4b3f330d6e0dd8f6aba5218c2999cb4be4c8c70230d44af88193ed0e2c2798f17f5895eac86da5744fa291f076061d67826b4f5afc58094b40067ab97627d51d021aa7ef9693e91a85dac93f1e79714a9e8491ad8039312b3fa5945cf36fcb0923c4d36ea8c7aee420546d02d98af4e3a51162adda4c3d69b7f071851d4d75497bbbd641dc3b93c57465daf14b5a3e4292d741db842677af561d4dcf74657a88e3ab4c017916f537726544de"], 0x5) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @user_passkey_reply={{0x42e, 0xa}, {@any, 0x8}}}, 0xe) 17:23:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) 17:23:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xfdfdffff, 0x0, 0x0, 0x0}) 17:23:33 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) r3 = dup(0xffffffffffffffff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_set_scan_enable={{0x200c, 0x2}, {0x7, 0x1}}}, 0x6) syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x10000) r6 = socket(0x9, 0x800, 0xfffffffd) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000240)={0x8001, 0x8001}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e23, @rand_addr=0x64010101}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e23, @remote}, 0x280, 0x0, 0x0, 0x0, 0xfffe, &(0x7f0000000280)='sit0\x00', 0x9, 0x9, 0x7}) ppoll(&(0x7f0000000100)=[{r6, 0x7004}, {r1, 0x1}, {r1, 0x600}, {r0, 0x5400}], 0x4, &(0x7f0000000180)={r7, r8+60000000}, &(0x7f0000000200)={[0x3f]}, 0x8) 17:23:33 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) 17:23:33 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x6802, 0x1) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x100, &(0x7f0000002640)) 17:23:33 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:23:34 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0104cc1584ea4dc4de566f0f8f84ef4b3f330d6e0dd8f6aba5218c2999cb4be4c8c70230d44af88193ed0e2c2798f17f5895eac86da5744fa291f076061d67826b4f5afc58094b40067ab97627d51d021aa7ef9693e91a85dac93f1e79714a9e8491ad8039312b3fa5945cf36fcb0923c4d36ea8c7aee420546d02d98af4e3a51162adda4c3d69b7f071851d4d75497bbbd641dc3b93c57465daf14b5a3e4292d741db842677af561d4dcf74657a88e3ab4c017916f537726544de"], 0x5) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @user_passkey_reply={{0x42e, 0xa}, {@any, 0x8}}}, 0xe) 17:23:34 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd}) 17:23:34 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 17:23:34 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0xfffffffffffffdb9, 0x600}, {&(0x7f0000000080)="3d9ed70e6e3ae6d27560495b1749b830cec730d7f2bb72bb33a4b19b64d9d0095f8f747735430ae2d9d29e169e03c46977db64d83689814e73548fcce1", 0x3d, 0x1}], 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00175072afd65a84491971745152b130f513c23f7958afc25051aaa47f2dc29fa35dcf3c8ff16649eabcb4f139f2c3d6fcc5aa12be2ebd5c88b0d62b706cb2b2a49cfa8f48b52882b80ff87b8985054ac5a16574afe34245847a73a1c9e4eea340005ee4540cea3e078cb9c2c0055de83b1539757e9be08f"]) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:23:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xfeffffff, 0x0, 0x0, 0x0}) 17:23:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) 17:23:34 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0104cc1584ea4dc4de566f0f8f84ef4b3f330d6e0dd8f6aba5218c2999cb4be4c8c70230d44af88193ed0e2c2798f17f5895eac86da5744fa291f076061d67826b4f5afc58094b40067ab97627d51d021aa7ef9693e91a85dac93f1e79714a9e8491ad8039312b3fa5945cf36fcb0923c4d36ea8c7aee420546d02d98af4e3a51162adda4c3d69b7f071851d4d75497bbbd641dc3b93c57465daf14b5a3e4292d741db842677af561d4dcf74657a88e3ab4c017916f537726544de"], 0x5) pipe2(&(0x7f0000000080), 0x80000) 17:23:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xffefffff, 0x0, 0x0, 0x0}) [ 2103.282941] Bluetooth: hci3: command 0x0406 tx timeout [ 2105.330976] Bluetooth: hci3: command 0x0406 tx timeout [ 2107.378953] Bluetooth: hci3: command 0x0406 tx timeout 17:23:43 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) 17:23:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) r3 = dup(0xffffffffffffffff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_set_scan_enable={{0x200c, 0x2}, {0x7, 0x1}}}, 0x6) syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x10000) socket(0x9, 0x800, 0xfffffffd) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000240)={0x8001, 0x8001}) clock_gettime(0x0, &(0x7f0000000140)) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e23, @rand_addr=0x64010101}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e23, @remote}, 0x280, 0x0, 0x0, 0x0, 0xfffe, &(0x7f0000000280)='sit0\x00', 0x9, 0x9, 0x7}) 17:23:43 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[@ANYBLOB='B']) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x100, &(0x7f0000002640)) 17:23:43 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0104cc1584ea4dc4de566f0f8f84ef4b3f330d6e0dd8f6aba5218c2999cb4be4c8c70230d44af88193ed0e2c2798f17f5895eac86da5744fa291f076061d67826b4f5afc58094b40067ab97627d51d021aa7ef9693e91a85dac93f1e79714a9e8491ad8039312b3fa5945cf36fcb0923c4d36ea8c7aee420546d02d98af4e3a51162adda4c3d69b7f071851d4d75497bbbd641dc3b93c57465daf14b5a3e4292d741db842677af561d4dcf74657a88e3ab4c017916f537726544de"], 0x5) 17:23:43 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xffffefff, 0x0, 0x0, 0x0}) 17:23:43 executing program 4: sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80402481}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8011}, 0x20000000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = getpid() process_vm_readv(r1, &(0x7f0000001900)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, r0, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x10000}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48854}, 0x20004000) 17:23:43 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 17:23:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000280)={0xe3, 0xb9, 0x85, "066589d047ebf060bef0ef8f4133d5e07109fb9358833c9175abc39c759c6ed8c708cf306997dac3e87c60cdd3ac6adb6e8128c929aeea62cccf8302f871461091430d3c8704a5879e0710c29c39fb8a9df1c03a3046e1138f4b22b33a4b6ab4e386b8babfedb64b77604aee15d8394ba021f3e31c9db52677d5979b9c21093cef15b07c058720a314057ebbca1871ad1e4b6d5af41207ff17720f62871d0d23f71f5ebe7421470612694ba161b13daeed7a3870e667691b6736eaa2be1b1c046a2a8d9fdfd46507d9b985ec3a6960b891b3ecf1504006504d7d8b2114f7ef04ebcc4c"}) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x6802, 0x1) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000200)={0x0, 0xfffffffffffffffc, 0x3d, 0xf7, @scatter={0x1, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/120, 0x78}]}, &(0x7f0000000140)="0b20fede83eff2b5f306f3177522f82b509abd11d1181f90c38147cdcaff92f40a6c01e73cca9e136b232e6897d25bbee9daaa74f64df130ba0b58c87a", &(0x7f0000000180)=""/51, 0x4, 0x10020, 0x3, &(0x7f00000001c0)}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) 17:23:43 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0104cc1584ea4dc4de566f0f8f84ef4b3f330d6e0dd8f6aba5218c2999cb4be4c8c70230d44af88193ed0e2c2798f17f5895eac86da5744fa291f076061d67826b4f5afc58094b40067ab97627d51d021aa7ef9693e91a85dac93f1e79714a9e8491ad8039312b3fa5945cf36fcb0923c4d36ea8c7aee420546d02d98af4e3a51162adda4c3d69b7f071851d4d75497bbbd641dc3b93c57465daf14b5a3e4292d741db842677af561d4dcf74657a88e3ab4c017916f537726544de"], 0x5) 17:23:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000000)={&(0x7f00000000c0)=""/190, 0xbe}) 17:23:43 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 17:23:43 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01b9"]) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/208, 0xd0}], 0x1, &(0x7f0000000340)=[@cred={{0x1c}}], 0x20}, 0x40000002) faccessat(r1, &(0x7f0000000040)='./file0\x00', 0x42) 17:23:43 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xfffffdfd, 0x0, 0x0, 0x0}) 17:23:43 executing program 2: ioctl(0xffffffffffffffff, 0xce, &(0x7f0000000000)="04") setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:23:43 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6) 17:23:43 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020e424d1d3a4d2a1c5602bfa0d86ff2ae904e35449c038e7182b641f12ef237cba2af480f9b06fb1fd932782ec0065a4b85a960f0da"]) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:23:43 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) 17:23:43 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}) 17:23:43 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0104cc1584ea4dc4de566f0f8f84ef4b3f330d6e0dd8f6aba5218c2999cb4be4c8c70230d44af88193ed0e2c2798f17f5895eac86da5744fa291f076061d67826b4f5afc58094b40067ab97627d51d021aa7ef9693e91a85dac93f1e79714a9e8491ad8039312b3fa5945cf36fcb0923c4d36ea8c7aee420546d02d98af4e3a51162adda4c3d69b7f071851d4d75497bbbd641dc3b93c57465daf14b5a3e4292d741db842677af561d4dcf74657a88e3ab4c017916f537726544de"], 0x5) 17:23:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) r3 = dup(0xffffffffffffffff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_set_scan_enable={{0x200c, 0x2}, {0x7, 0x1}}}, 0x6) syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x10000) socket(0x9, 0x800, 0xfffffffd) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000240)={0x8001, 0x8001}) clock_gettime(0x0, &(0x7f0000000140)) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e23, @rand_addr=0x64010101}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e23, @remote}, 0x280, 0x0, 0x0, 0x0, 0xfffe, &(0x7f0000000280)='sit0\x00', 0x9, 0x9, 0x7}) 17:23:43 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x1100800, 0x0) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) [ 2112.818927] Bluetooth: hci3: command 0x0406 tx timeout 17:23:52 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) r3 = dup(0xffffffffffffffff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_set_scan_enable={{0x200c, 0x2}, {0x7, 0x1}}}, 0x6) syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x10000) socket(0x9, 0x800, 0xfffffffd) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000240)={0x8001, 0x8001}) clock_gettime(0x0, &(0x7f0000000140)) 17:23:52 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd}) 17:23:52 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:23:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x45ac02, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000040)) r2 = dup(r0) pipe(&(0x7f00000000c0)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0xfffffffffffffffe, 0x1da, 0x69, @buffer={0x0, 0x91, &(0x7f0000000100)=""/145}, &(0x7f0000000380)="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"/474, &(0x7f0000000240)=""/73, 0x9, 0x21, 0x0, &(0x7f00000002c0)}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x2, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:23:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xfffffff5, 0x0, 0x0, 0x0}) 17:23:52 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000000140)=ANY=[], 0xffffffffffffff81) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) 17:23:52 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="c4a18fbf4c3fc9d5d00230d5e573210ebcc0749791280e3fc918c54e14eeaa4d4c360fac7ae4ad6ca93738343ce0af8d0e913fd1cffad5647811043cdfa72836db922009d74193d2a9249e2a7be90800d84744b2a845d8e07af4764406f4751686613f11144e1140e68f1136645273d4cc7e99aec4b81338d17c6590138f85903a900b272474733c84a028a69ba7e0eaf13ef5b02d9be7bf8e9c7fe25d60f0942b21ddf116248568cc8b1d844a589fb4244af186d34d3a76d4d75ad060ca9b6a3d8e3d4fe2e47550ebda081c15963ba45177417d2b0b0d47ec497125ec2d8ee7af0b84f9e9e7dfd6baad4662bb37f5dfc8cfcb32285d860be6d0ef1ab3621b80f52fd86d71afe0964b06028ada2dea6beb1fe8a0aa9d504da8f139"]) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) accept(r1, &(0x7f0000000140)=@ethernet={0x0, @link_local}, &(0x7f0000000080)=0x80) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000240), 0x800) 17:23:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0104cc1584ea4dc4de566f0f8f84ef4b3f330d6e0dd8f6aba5218c2999cb4be4c8c70230d44af88193ed0e2c2798f17f5895eac86da5744fa291f076061d67826b4f5afc58094b40067ab97627d51d021aa7ef9693e91a85dac93f1e79714a9e8491ad8039312b3fa5945cf36fcb0923c4d36ea8c7aee420546d02d98af4e3a51162adda4c3d69b7f071851d4d75497bbbd641dc3b93c57465daf14b5a3e4292d741db842677af561d4dcf74657a88e3ab4c017916f537726544de"], 0x5) 17:23:52 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x6, 0x101000) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x2, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x4}, 0x6) recvfrom(r0, &(0x7f0000000100)=""/10, 0xa, 0x102, &(0x7f0000000140)=@generic={0x11, "7332915686ca6690fcda489a2577e04d581cd6603f11397ded1a87f467992154b8493ea97b73fe654445b913cf70ed4b1a9a299be7b1c4d2c111039114f0ce2f863a2feeabbed1c6106b95cb0a060466c229fdbc5cd850e9e9872275c7dc4c91b2165cc20fbbadd62ff0f2cda7f8ca3df12783d3456b3c1ef0535da10970"}, 0x80) 17:24:04 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}) 17:24:04 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0104cc1584ea4dc4de566f0f8f84ef4b3f330d6e0dd8f6aba5218c2999cb4be4c8c70230d44af88193ed0e2c2798f17f5895eac86da5744fa291f076061d67826b4f5afc58094b40067ab97627d51d021aa7ef9693e91a85dac93f1e79714a9e8491ad8039312b3fa5945cf36fcb0923c4d36ea8c7aee420546d02d98af4e3a51162adda4c3d69b7f071851d4d75497bbbd641dc3b93c57465daf14b5a3e4292d741db842677af561d4dcf74657a88e3ab4c017916f537726544de"], 0x5) 17:24:04 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x6000) faccessat(r0, &(0x7f0000000040)='./file0\x00', 0x100) 17:24:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xfffffff6, 0x0, 0x0, 0x0}) 17:24:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = getpid() process_vm_readv(r3, &(0x7f0000001900)=[{0x0}, {0x0, 0xffffffffffffffd5}, {0x0}, {0x0, 0xfffffffffffffe03}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000100)={'\x00', 0x0, 0x1, 0x2, 0x6, 0x7, r3}) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x6802, 0x1) ioctl$SG_GET_KEEP_ORPHAN(r4, 0x2288, &(0x7f0000000040)) 17:24:04 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd}) 17:24:04 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x8441, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000100)) write$bt_hci(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="01392026964a7ebfb6e37f3672e64331174e09b38608fdcd6351ef373c9a1a30471ac1583ca12137ed5a8d7f655089f65f88e1e5cec77f10b9b71c950bd37a4e5823794702937dda3caa3f3e65fea1c432cc0a0fff0510d8ff693412b0b6ada1915614eae10905fc8ff65800f803b75ba083a46036f8626b7d68654eba67582234413e31d1a26fd1652c4098cb75d6962862c3898d60372aa96940ee7c3cfc76d9ed2da66b05eb0248211593779b4293a7c9bc4205c0ab5e79a7b5cc2b736f98ba24f72dc60857be3e784e9effa03c1573797517f34bffb34bf4b33c0fb9dc2d0910e417fdb82c62820d46dc2f72e34e0e8fbd43a3a7826aea7bd88b295ebade06f488ad28d6a3f7fea71f9748cdaeb1154ae1b34355214b754d62de47d9bab50f6ce05bdf5a1cbfd995561b919df59d03120eb749820aee0360793945e43ae79863d641f48f56640746a21321566e0fbc1ff41796e580be43c64307698c5a96a7405ca9fe292224590b949f7f690a5b12fb0f9af59948586e08e3b500c186af177e9ce759db14b8b0dcca0fc9764ed84dbde5b8b1c28918f98f2b812282dcfb967446a28d72b435c8cbe2e6385a64f775d288d4bf80c250b0a99fe10016c3e65e489e71d5dcffdd0bfc37f6a2d9d8a1ea86b0650fd7847c072be4192f398623a2e8cd8ba23d75a6af2203bd92387e1e3c7a2aa1ca4c0930bba30bbf740025ec7f525f545899db6da5322129f8cf2e785cf39312c1e85204c0a05b96054332000000000000000000"], 0x2a) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_auth_payload_to={{0xc7b, 0x2}}}, 0x6) 17:24:04 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) r3 = dup(0xffffffffffffffff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_set_scan_enable={{0x200c, 0x2}, {0x7, 0x1}}}, 0x6) syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x10000) socket(0x9, 0x800, 0xfffffffd) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000240)={0x8001, 0x8001}) 17:24:04 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:24:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="020066696c6530000000000000000000a716f51e414705f4a70e900e58ed5d468cdb7d805a180ed6834f3c7e05fbdef9765a9ca927972701aec26b182f34ded74d9aac6bf2526680e69fec476da236124cab"]) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f00000001c0)) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x8, 0x0) r4 = epoll_create(0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r4, 0xc038943b, &(0x7f0000000480)={0x5, 0x38, '\x00', 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000300)={0x0, 0x3, 0x23, 0x80, @buffer={0x0, 0xcf, &(0x7f00000000c0)=""/207}, &(0x7f0000000040)="588b3ec49aa23ba4b505e66f4513b8522c0b2eb8b95da84565665394b8010c78d5f165", &(0x7f00000001c0)=""/203, 0x10000, 0x0, 0x2, &(0x7f00000002c0)}) 17:24:04 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="005051a401000000d5cf289e57a5cc73c21fdaca138b41"]) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:24:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xfffffffc, 0x0, 0x0, 0x0}) 17:24:04 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0104cc1584ea4dc4de566f0f8f84ef4b3f330d6e0dd8f6aba5218c2999cb4be4c8c70230d44af88193ed0e2c2798f17f5895eac86da5744fa291f076061d67826b4f5afc58094b40067ab97627d51d021aa7ef9693e91a85dac93f1e79714a9e8491ad8039312b3fa5945cf36fcb0923c4d36ea8c7aee420546d02d98af4e3a51162adda4c3d69b7f071851d4d75497bbbd641dc3b93c57465daf14b5a3e4292d741db842677af561d4dcf74657a88e3ab4c017916f537726544de"], 0x5) 17:24:04 executing program 4: getsockopt(0xffffffffffffffff, 0x8, 0x1ff, &(0x7f0000000040)=""/201, &(0x7f0000000140)=0xc9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x6802, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xfff6, 0x2}, 0x6) 17:24:04 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 17:24:04 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0104cc1584ea4dc4de566f0f8f84ef4b3f330d6e0dd8f6aba5218c2999cb4be4c8c70230d44af88193ed0e2c2798f17f5895eac86da5744fa291f076061d67826b4f5afc58094b40067ab97627d51d021aa7ef9693e91a85dac93f1e79714a9e8491ad8039312b3fa5945cf36fcb0923c4d36ea8c7aee420546d02d98af4e3a51162adda4c3d69b7f071851d4d75497bbbd641dc3b93c57465daf14b5a3e4292d741db842677af561d4dcf74657a88e3ab4c017916f537726544de"], 0x5) 17:24:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xfffffffe, 0x0, 0x0, 0x0}) 17:24:04 executing program 2: ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f00000000c0)={0x9, "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"}) 17:24:04 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0xf, 0x0, 0x4}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'vlan0\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x8, 0x9, [0x9]}}) 17:24:04 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) r3 = dup(0xffffffffffffffff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_set_scan_enable={{0x200c, 0x2}, {0x7, 0x1}}}, 0x6) syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x10000) socket(0x9, 0x800, 0xfffffffd) 17:24:04 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 17:24:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0104cc1584ea4dc4de566f0f8f84ef4b3f330d6e0dd8f6aba5218c2999cb4be4c8c70230d44af88193ed0e2c2798f17f5895eac86da5744fa291f076061d67826b4f5afc58094b40067ab97627d51d021aa7ef9693e91a85dac93f1e79714a9e8491ad8039312b3fa5945cf36fcb0923c4d36ea8c7aee420546d02d98af4e3a51162adda4c3d69b7f071851d4d75497bbbd641dc3b93c57465daf14b5a3e4292d741db842677af561d4dcf74657a88e3ab4c017916f537726544de"], 0x5) 17:24:15 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 17:24:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffe, 0xfffffffffffffffd}, 0x6) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x1}, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect(r1, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80) 17:24:15 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45}], 0x0, &(0x7f0000010d00)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000480)=0xe8) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x6802, 0x1) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x6802, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/key-users\x00', 0x0, 0x0) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x6802, 0x1) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x6802, 0x1) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000600)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'veth0_to_bridge\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000740)={'syztnl2\x00', r8, 0x29, 0x7, 0x90, 0x80000001, 0x1, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80, 0x8000, 0x800, 0x1e8}}) setresuid(0x0, r3, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x200, 0x3, &(0x7f0000000280)=[{&(0x7f00000000c0)="f07a9dbe", 0x4, 0x8}, {&(0x7f0000000140)="386020916c9a138c81645ac904d0198f07019a90221681bd2883954a11dad27aaa9343ca2b44e889d48b44662be73b0d828f3df71aefc4289a9cca3a854900d748fe405f52f14a4ef9089bf87feda5edd079487d92d54a68ab4ee0b3c13803f7167a41d982b61f5699d8de05ad2e29d5ee82bab79aaa1c365169d9c3935d71b54b525bcf429e9bf0bb6deda11326de58b4f5baf161d8c7016ce3d23c", 0x9c, 0x2}, {&(0x7f0000000240)="22bdee704230b6b7b01a869a83b3", 0xe}], 0x800000, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, r1}}, {@huge_within_size}, {@huge_always}, {@mode={'mode', 0x3d, 0x10000}}, {@uid={'uid', 0x3d, r2}}, {@huge_within_size}, {@huge_never}, {@huge_within_size}, {@size={'size', 0x3d, [0x18]}}], [{@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x51, 0x34, 0x0, 0x62, 0x38, 0x63, 0x37, 0x33], 0x2d, [0x37, 0x39, 0x63, 0x39], 0x2d, [0x37, 0x68, 0x0, 0x62], 0x2d, [0x33, 0x33, 0xb597627268358f7f, 0x63], 0x2d, [0x36, 0x62, 0x31, 0x37, 0x61, 0x66, 0x62, 0x65]}}}, {@appraise}, {@dont_hash}, {@subj_role={'subj_role', 0x3d, '#+.*\'$/\x82*'}}, {@fowner_gt={'fowner>', r3}}]}) 17:24:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) r2 = signalfd(r0, &(0x7f0000000000)={[0x5]}, 0x8) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000040)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x0, 0x0, 0x3e, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="a3c16d1b385bd8804cb8e0d8472356d9976b2b68cf006a5ac0011964cb65e0d08fcc13a198923be8933ec5d59ef15eb78ec77177b6edc201fb9eb4a1b946", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:24:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0xffffffff, 0x0, 0x0, 0x0}) 17:24:15 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 17:24:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) r3 = dup(0xffffffffffffffff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_set_scan_enable={{0x200c, 0x2}, {0x7, 0x1}}}, 0x6) syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x10000) socket(0x9, 0x800, 0xfffffffd) 17:24:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xfffe, 0x2}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x3}, 0x6) 17:24:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0104cc1584ea4dc4de566f0f8f84ef4b3f330d6e0dd8f6aba5218c2999cb4be4c8c70230d44af88193ed0e2c2798f17f5895eac86da5744fa291f076061d67826b4f5afc58094b40067ab97627d51d021aa7ef9693e91a85dac93f1e79714a9e8491ad8039312b3fa5945cf36fcb0923c4d36ea8c7aee420546d02d98af4e3a51162adda4c3d69b7f071851d4d75497bbbd641dc3b93c57465daf14b5a3e4292d741db842677af561d4dcf74657a88e3ab4c017916f537726544de"], 0x5) 17:24:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000001c0)) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x404100, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000300)={0x0, 0xfffffffffffffffc, 0xf0, 0xbd, @scatter={0x0, 0x0, &(0x7f0000000100)}, &(0x7f0000000380)="184038ac2528ad503e6cc4cfe87730ad02ea01d37b977c071436d48fe188d2c4cc4aac0603298ca44b16de675c1e425babc2691cbf4003c2d9c99c17694f6295170d529d5693a2c10a82e4a93281063dafb1353f868a6b09390c49d727cb72982a0bcddb1eff93b3b7242bc5c7680b306f2d8e1df316acd454b1fe365e67d8ba515ba43ea10d6acf4ecd122bfadc461d0ce6cc33fe684c8a0e0686a63658c85b6c2fb8d9e03b1dd9269e16546b3a6354f0c9e22773350385cf20ef039294139d701209749315d20000000027248a9654344d84b3418a67b62b801a333d89b9a78d8d3badd4c656368cf8fbfe3ecc2408", &(0x7f0000000140)=""/26, 0x736e, 0x24, 0x3, &(0x7f0000000180)}) fcntl$dupfd(r1, 0x0, r0) 17:24:15 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 17:24:15 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6b5a208c912e89c5d015e96d8e68c6a6d55656cdf0e6add5d760ae0a2be9ce652e9fc3b591ebed2b94a5b0596fe52648cc2c250b42261bc8859bc24d59d33633e0e13189ca7d8c0be3b35671f6cc4c3f18fad02aa0a6b6"]) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) r1 = getpid() process_vm_readv(r1, &(0x7f0000001900)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x8, &(0x7f0000000140)) 17:24:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:24:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000040)="6818aa7d7ffa48415132820fbeca6bd7edb07ea03789ccb83bf74c7698d7a96bfd28d6c805a4793f81a18eda7d01019c7a9e2e85b33a782b7094e94696e7c057a9513cbdd23133af844c8efc607c4c8a8f11b2bf97e69a396d76c700f404e15b44e713073c0face42244353221453d110de66d258c636dcf19b4bfbed7d6f699ac41af44862240eafa15347bd5fd152f08c5fc0a4873c3bc68884a6415292178d1aceb91ed658540e9027afa6fa42a3dc7105d36565c363eb579ddaca149d01b423762853ce2c1d85f4fea2d709c5503b5a8457c90004db7c625f532f43c") 17:24:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x2, 0x0, 0x0}) 17:24:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) r3 = dup(0xffffffffffffffff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_set_scan_enable={{0x200c, 0x2}, {0x7, 0x1}}}, 0x6) syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x10000) 17:24:25 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) 17:24:25 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[@ANYBLOB="f8"]) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:24:25 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0104cc1584ea4dc4de566f0f8f84ef4b3f330d6e0dd8f6aba5218c2999cb4be4c8c70230d44af88193ed0e2c2798f17f5895eac86da5744fa291f076061d67826b4f5afc58094b40067ab97627d51d021aa7ef9693e91a85dac93f1e79714a9e8491ad8039312b3fa5945cf36fcb0923c4d36ea8c7aee420546d02d98af4e3a51162adda4c3d69b7f071851d4d75497bbbd641dc3b93c57465daf14b5a3e4292d741db842677af561d4dcf74657a88e3ab4c017916f537726544de"], 0x5) 17:24:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x0, 0xfffffffffffffffc, 0x84, 0x0, @buffer={0x0, 0xff, &(0x7f00000000c0)=""/255}, &(0x7f00000001c0)="f3cbc8f22b540568165622853fdd818fd385887789288bc474006cb35116c6360524904de5f760cf66d75cdb352c4f577f427ba62d98efef10527fb9322ef389073046139cfcb253a88c5983e7e3e6f34d21ef6a7e4682d27e75683cbe58d9e6ce3542cd9fee2e61969a01e916394c1751c6a2ab4f448155ecf87df2f61d44c84e78d8c0", &(0x7f0000000040)=""/59, 0x80000001, 0x36, 0x2, &(0x7f0000000280)}) r2 = dup(r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:24:25 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) 17:24:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0x3}, 0x6) 17:24:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, 0x1) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000000)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:24:25 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000240)={0x0, 0xfb, 0xd5, 0x1, 0x7, "bfed0b113737aa5690730eceb2b3cb14", "3547a4f869a943603d879c5531ebb61c118320b1da4922ee9833b05189b141a95394c710ae47bf82cb426ec209c675285ad7bc6b2d175995b61f4e9079939e8ca70b56d29da026bde8f7783f1e83feda4f3b951e20c384a670ec5b67c06866aae9e332d6622ed917df7f81bdd4ecab66776ff9da7e8d1e07feb23c0f3222ba723ac0e620568f6c162b00cd1c37801d6004c3f289956d013a3daad784ce569c1c4c957afbfe2cac2691b10810dec4a94eceae1e5f28e0998be03b8f57da4e2b03"}, 0xd5, 0x1) 17:24:25 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0104cc1584ea4dc4de566f0f8f84ef4b3f330d6e0dd8f6aba5218c2999cb4be4c8c70230d44af88193ed0e2c2798f17f5895eac86da5744fa291f076061d67826b4f5afc58094b40067ab97627d51d021aa7ef9693e91a85dac93f1e79714a9e8491ad8039312b3fa5945cf36fcb0923c4d36ea8c7aee420546d02d98af4e3a51162adda4c3d69b7f071851d4d75497bbbd641dc3b93c57465daf14b5a3e4292d741db842677af561d4dcf74657a88e3ab4c017916f537726544de"], 0x5) 17:24:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x3, 0x0, 0x0}) 17:24:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) r3 = dup(0xffffffffffffffff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_set_scan_enable={{0x200c, 0x2}, {0x7, 0x1}}}, 0x6) syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x10000) 17:24:25 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:24:25 executing program 2: shmdt(0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0xffffffffffffffff, 0x5, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x1, 0x0, 0x0, 0x0}) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x410080, 0x0) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f00000000c0)=@v1={0x1000000, [{0x8eed, 0x2}]}, 0xc, 0x2) 17:24:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:24:25 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 17:24:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) r3 = dup(0xffffffffffffffff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_set_scan_enable={{0x200c, 0x2}, {0x7, 0x1}}}, 0x6) 17:24:25 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xffff, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="3ffd5ad24b306dc9bd2c4cb710117192fb462d7652c949fe5220fde95eddaa9f766f286cd84ec304f43e5ae186c57eb64b624a3e7a9d7a56a403b4", 0x3b, 0x7}, {&(0x7f0000000240)="08fc65cb7d920226376f1e04a10eee1eaa08a89c88b9b4e9982490e102ea77c34b7904aea07797480230ef9b5ac3314d13971d30f33e53b961d59d95621b5244feba3e4185ce121e09257e1a85eb7b3052667306b298e4c5c512bf47426069d79bb67842ab5a0af5a60de6af345803c82a7b5fa45b4e55d2619e0a30fe1e29732a571c41f724c6c73027b63c8e7bfad5d8ab85852bd6d33ea5de2b8f9cc230ceb15cc76c46890b15e948eb", 0xab, 0x55f}], 0x10c0090, &(0x7f0000000300)={[{@size={'size', 0x3d, [0x32]}}, {@huge_within_size}, {@mode={'mode', 0x3d, 0x7}}, {@mpol={'mpol', 0x3d, {'bind', '=static', @void}}}, {@nr_blocks={'nr_blocks', 0x3d, [0x70, 0x0, 0x32, 0x39, 0x74, 0x67]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x35, 0x36, 0x35, 0x78, 0x31, 0x67]}}, {@huge_within_size}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'system_u'}}]}) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:24:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x6, 0x0, 0x0}) 17:24:34 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) r3 = dup(0xffffffffffffffff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) 17:24:34 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) 17:24:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) recvmsg$unix(r1, &(0x7f0000000280)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/218, 0xda}], 0x1, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x40) 17:24:34 executing program 6: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x5412, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = dup(r0) ioctl$SG_IO(r2, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:24:34 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0104cc1584ea4dc4de566f0f8f84ef4b3f330d6e0dd8f6aba5218c2999cb4be4c8c70230d44af88193ed0e2c2798f17f5895eac86da5744fa291f076061d67826b4f5afc58094b40067ab97627d51d021aa7ef9693e91a85dac93f1e79714a9e8491ad8039312b3fa5945cf36fcb0923c4d36ea8c7aee420546d02d98af4e3a51162adda4c3d69b7f071851d4d75497bbbd641dc3b93c57465daf14b5a3e4292d741db842677af561d4dcf74657a88e3ab4c017916f537726544de"], 0x5) 17:24:34 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]) name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@FILEID_INO32_GEN={0x8, 0x1, {0x4, 0xa38}}, &(0x7f0000000140), 0x1400) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) faccessat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x20) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000001c0)) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f00000001c0)=0x1) 17:24:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @reject_conn_req={{0x40a, 0x7}, {@none, 0x9}}}, 0xb) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@none}}}, 0xa) 17:24:34 executing program 6: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x6, 0x0, @fd=r1, 0xa0b, 0x0, 0x7, 0x0, 0x1}, 0x1000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x3, 0xc, 0x9, 0x82, 0x0, 0x1, 0x2210, 0x9, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x8}, 0x440, 0xef1, 0x7f, 0x5, 0x7, 0x3f, 0x4, 0x0, 0x6da, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x9) dup(r1) ioctl$SG_IO(r0, 0x2203, &(0x7f0000000140)={0x0, 0xfffffffffffffffe, 0x0, 0x0, @scatter={0x6, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/249, 0xf9}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f00000000c0)=""/90, 0x5a}, {&(0x7f0000000480)=""/252, 0xfc}, {&(0x7f0000000580)=""/190, 0xbe}, {&(0x7f0000000640)=""/243, 0xf3}]}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}) 17:24:34 executing program 6: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:24:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x7) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01000000000000000e2f66696c653000"]) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x5, 0x5, 0x6, 0x3ff, 0x80, 0xb4c5}) 17:24:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x8, 0x0, 0x0}) 17:24:34 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0104cc1584ea4dc4de566f0f8f84ef4b3f330d6e0dd8f6aba5218c2999cb4be4c8c70230d44af88193ed0e2c2798f17f5895eac86da5744fa291f076061d67826b4f5afc58094b40067ab97627d51d021aa7ef9693e91a85dac93f1e79714a9e8491ad8039312b3fa5945cf36fcb0923c4d36ea8c7aee420546d02d98af4e3a51162adda4c3d69b7f071851d4d75497bbbd641dc3b93c57465daf14b5a3e4292d741db842677af561d4dcf74657a88e3ab4c017916f537726544de"], 0x5) 17:24:34 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100, &(0x7f0000002640)) 17:24:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x9, 0x0, 0x0}) 17:24:44 executing program 6: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x503000, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r3, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x44}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008090}, 0x1) keyctl$unlink(0x9, 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000002c0)={0x0, 0x0}) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x6802, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xbe, 0x3e, 0x7, 0x9, 0x0, 0x8, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3b1, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x80, 0x3, 0xfff, 0x8, 0x1f, 0x3, 0xffff, 0x0, 0x6, 0x0, 0x2}, r4, 0x5, r5, 0xa) r6 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r7 = dup(r6) ioctl$SG_IO(r7, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:24:44 executing program 4: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000001c0)) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000080)={0xe1, 0x4}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000240)=0x8) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) ioctl$sock_bt_hci(r1, 0x400448dc, &(0x7f00000000c0)="4cf4291a9d5e4f582c4270fb1f7a6bac1d753a44a2dc3d10423f064640e158d6134006ff17abfce79e9a88b661e51fd1d2c57ba62147a99cc985c9d10da8cd371c4af68bb87765611d665e1f791301fed2dc8505fcb69491f1e2eaa8ce3d83e59d23782b52e9045003d2282ec3f71f141417b6026c4d3fb6d57ee16dd3825c508eb242188f5b484d18ac39a347319e375590d2acc8facce965913310a3062cbc8ac3bd34a48cd8f39de3c9325c10232b4230eb01bbb0dbd9085fc2793d91d12572170583e84ee851310ce24f4d44") 17:24:44 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[@ANYBLOB="e5"]) statx(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x10, &(0x7f0000000240)) 17:24:44 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0xd, 0x0, 0x0}) 17:24:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000380)='./file0\x00', 0x101000, 0xa0) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x110, r1, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000000}}, './file0\x00'}) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x6802, 0x1) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r6, 0x0, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x7ff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) bind$packet(r4, &(0x7f0000000400)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r7 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/170, 0xaa}], 0x1, &(0x7f0000000180)=""/88, 0x58}, 0x0, 0x40010000, 0x0, {0x1}}, 0x5) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @scatter={0x1, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/188, 0xbc}]}, &(0x7f0000000240)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:24:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0104cc1584ea4dc4de566f0f8f84ef4b3f330d6e0dd8f6aba5218c2999cb4be4c8c70230d44af88193ed0e2c2798f17f5895eac86da5744fa291f076061d67826b4f5afc58094b40067ab97627d51d021aa7ef9693e91a85dac93f1e79714a9e8491ad8039312b3fa5945cf36fcb0923c4d36ea8c7aee420546d02d98af4e3a51162adda4c3d69b7f071851d4d75497bbbd641dc3b93c57465daf14b5a3e4292d741db842677af561d4dcf74657a88e3ab4c017916f537726544de"], 0x5) 17:24:44 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) r3 = dup(0xffffffffffffffff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r5) 17:24:44 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}) 17:24:44 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) dup(0xffffffffffffffff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 17:24:44 executing program 6: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6, r1}) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$inet6_udp_int(r3, 0x11, 0x0, &(0x7f0000001700), &(0x7f0000001740)=0xfffffffffffffdff) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@private1, 0x60, r1}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000004c0)={@ipv4={'\x00', '\xff\xff', @multicast2}, r1}, 0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/58, 0x3a}], 0x1}, 0x10000) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa0, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000893}, 0x20000040) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x7, 0x20, 0x1, 0x1ff, {{0x10, 0x4, 0x1, 0x3b, 0x40, 0x67, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @broadcast, {[@lsrr={0x83, 0x23, 0xa9, [@loopback, @remote, @loopback, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x31}, @dev={0xac, 0x14, 0x14, 0x2d}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x7, 0xd, [@broadcast]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c010000", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fbdbdf25110000005800018008000300020000000800030000000000140002006970366772653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000300030000000800030000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0c0001800800030005000000a800018014000200776c616e30000000000000000000000014000200626f6e645f736c6176655f31000000000800030003000000140002006e6574706369300000000000000000000800030001000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000001400020076657468305f746f5f626174616476001400020073797a6b616c6c6572300000000000006c000180080003000300000014000200766972745f776966693000000000000014000200626f6e645f736c6176655f31000000000800010012e968011328cf92f01c999f167212b3ff3bbb0000dadc731c462a9f397191872e84b8fdb9538acb7f7ca954cd0b6546d66da4d8770a", @ANYRES32=r5, @ANYBLOB="1400020069703665727370616e30000000000000140002006e65747063693000000000000000000008000100", @ANYRES32=r6, @ANYBLOB], 0x18c}, 0x1, 0x0, 0x0, 0x40408a0}, 0x10) keyctl$unlink(0x9, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r8 = dup(r7) ioctl$SG_IO(r8, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:24:44 executing program 7: ptrace$getsig(0x4202, 0xffffffffffffffff, 0x80, &(0x7f0000000040)) getpid() r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:24:44 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x10, 0x0, 0x0}) 17:24:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0104cc1584ea4dc4de566f0f8f84ef4b3f330d6e0dd8f6aba5218c2999cb4be4c8c70230d44af88193ed0e2c2798f17f5895eac86da5744fa291f076061d67826b4f5afc58094b40067ab97627d51d021aa7ef9693e91a85dac93f1e79714a9e8491ad8039312b3fa5945cf36fcb0923c4d36ea8c7aee420546d02d98af4e3a51162adda4c3d69b7f071851d4d75497bbbd641dc3b93c57465daf14b5a3e4292d741db842677af561d4dcf74657a88e3ab4c017916f537726544de"], 0x5) 17:24:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0xffffffffffffffff, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:24:44 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd}) 17:24:44 executing program 4: lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0xfb, 0x20, 0x4, 0x3, "4f5086e3ddf91f2ad810770b40475706", "abd652d3c50073c9666d21"}, 0x20, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 17:24:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x300, 0x0, 0x0}) 17:24:52 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) dup(0xffffffffffffffff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 17:24:52 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 17:24:52 executing program 6: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f00000001c0)) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f00000001c0)) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000040)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000cea0f2341ba62a739b66a7476166030701080074305b8e8a20066634000000000000000200f700540007800800024080000000080002400000015821f71f40000000090800024000000008080002400000100008000240000000030800024000000002d3cab3fb857d38080001400000d05b080002400000108c08000140000000000c720640000000000000e4cc902a3eb49dc69372c95919b1a9251fcb28b3bfd78efe53a2d47a3755d0230d4c2abb39800e3506bcc4953b70820ca0c2c51fa08bab3c35abbb"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r5 = dup(r4) ioctl$SG_IO(r5, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:24:52 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, 0x1) r3 = dup2(r1, r1) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000080)={0x8, "bf964b"}, 0x6) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000040)="d8d8d97c0ff93110cf779bdba39cc508f72cf8a1b899b330509ec34164") 17:24:52 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0067f8396fb85086b1a0a432597428e2d7a33d1fa18b5bfa3b59e215bd765d5464cb1c6a8b5fe9027165511e189fa6722e1ee8d29f7d7c0f5ebb059ff6be95b3546f232078161b84fe37ad82f34d64102435f555c49a74024dfe5110459b89c98da99b0bf76d93d6be221f5a2346e930b8e880bdf3d3158556b3889bd7bf4f813f4292e5feedfc0d7522d4b6e481816a08cddcff8c9c55be3ad180f786877b9cd44a286b5b2af87397044fa391845c61e5e7de5929ef6c664cc2"]) statx(r0, &(0x7f0000000080)='./file0\x00', 0x6000, 0x80, &(0x7f0000000340)) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0xc000, 0x0) 17:24:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0104cc1584ea4dc4de566f0f8f84ef4b3f330d6e0dd8f6aba5218c2999cb4be4c8c70230d44af88193ed0e2c2798f17f5895eac86da5744fa291f076061d67826b4f5afc58094b40067ab97627d51d021aa7ef9693e91a85dac93f1e79714a9e8491ad8039312b3fa5945cf36fcb0923c4d36ea8c7aee420546d02d98af4e3a51162adda4c3d69b7f071851d4d75497bbbd641dc3b93c57465daf14b5a3e4292d741db842677af561d4dcf74657a88e3ab4c017916f537726544de"], 0x5) 17:24:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) dup(r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/exec\x00') setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x4000, 0x4) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x0, 0x0, 0x12, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="a37eed55a4c016232cd453e48ac1641b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:24:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x600, 0x0, 0x0}) 17:24:52 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="8042afd8a754b724b11202f3290cfbce1293e99ef39ee260023f91e7951f276b9ee999c0ec00047db207d355f386f58ee5ce6d582e313e9ee191d02203bc000bbbbe1d4b89656881abf5e010eb54c50aa98efe4436a054eed561f7ea34478afffd63498ccd027d90fb4dc6acffa3810b46ec65e21a34c202e88e"]) open$dir(&(0x7f0000000040)='./file0\x00', 0x400000, 0x54) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000001700)='./file0\x00', 0x9, 0x2, &(0x7f00000017c0)=[{&(0x7f0000002740)="4047eae8de3179de4db346db345f7d74871531f7b26989c51850be4cd0bc45c234981b66acafacb1f3cb96cc1454ccadf30617c6c00af6178f20a393069dcf6d6c6c1e774568481c8de910facac40bbf6057b0d4dfccf3a866e22049bd1ad76855157943caac5da55e6199922cae3c474fcf65ea6a782136226c3f2780cc4a416b9141c2f2853735e6ac2f9429b99c3ba9068889ce0a5ba2df4c601acc4d07eec87c741a6f56caef998432809544031a6cfac20c814bfd50034a776176f6ceca97f56cd63012766bfdd1d2528452aae1ef70bbc226d3488cb5e8f8faf028ff9d6a3e84ffe3f12ecbbe0b09a1284fabe68ecf151600a8f3bbf72335093f496329cf2dcfaa82a731f2f55f806c70124f5c4b13f92ebff1c7d0d2c8629658feb96185f1b5c49e4a9501860fd82a9c7113b047ec53e78f33ea1d5467ce7736321f4d150fa8ec431d5cb182b597561456052bbc4c216f7bec39be738f82ad81e5f475f9d7d695faa8073f3f6b98abd24bde2561efbd8ed415c959ad7825d93975c325ab17e7307989ced22066ec2a5649065cebb9f3d168d1f480ba867cb946060437752090f0b15907b2633e08098ce48405c865d4f15a2ce38c0cb0a18201d7f4dcc1c1b1e7be944df179104545740ae06cbd35d7cdd970a35e001df83ef16eeb6acdef7539752da79e7f3cdd87dfbf9658cb9b7d23e152cdbf292a1bf7f1ba20ceea4bcf21d1bfc63e455d8cb6b53529741524f3da5410a57628f3259745d10a3a90939df82c223b539ed546f291a5c566602973c10b8aaf771cbbd2da132b3041b6b02e5134c709839a65d16eebfbfcdb4da56b1b76250a81d61aa40a2182c64572a735ffa0f5ca8672ba6bb60dff5a7c8a2acf89ff836e1f8ffeb76967170d12bd7c566a3d81c6bd254444392e0522b72cc3dda83a70a05df3c3f9f2c725b772c90a303939b1ed8169cb81477e52c6648f26f570bca4026d948387c623644dda1b42a99e9eb7d241eda643ce313d1f43ab27ac1b5fdfca6f5db938c512be4c4bfdfef8ca5211a58a0b30b122f78ea9957056794344d1d086ebe056aad4e7ad5ed53fb6ec79ac4266435babb13bf5d58dc8ad58516cce0fc988bcbf02ad83ffc16981fa23ecca7ba247fb46a9eaf0b3f9ab4c55c3cc75aef03c97cf371b91432fa5e42856b239556e82255cfa2abe12bf11ccc62ef9278201a7cf6f10b84f25cc081d50edc2a718ffe15686141d71df12586cd6f4f167c59d4fd451c3b4c760df6d3fef6dd49485f42f682954da7ac755ff1064e69e279e1a25f3bb7b6b4e5238c6d5af20c6972222128a190e49cd5173bfea79ac2573706111eb79022c72c7bf3b65bbef19c3e342d82c2f59110289aecad9d07db368117fb913807c43f463ca5b935726a52eb1ead549e48e0f191b3705f1d0609c4791601187e9f829fbc51eb601462a9d4b8333c5f3eae38e58ed76c4a93110195c384f16e5deac8930d1964e799417e5b9c089d9ce01330d8df0bdf6414fd39390297cbf403a3717d55b81e82085cbf073132e2d1a1eaff6b1e90ecb22070aa97ff97f989d1d4eb54a8cfc0be1ed98edc066c75e33862445e2c33af0fbf7a4fe681e40f307eecce627ab70a5f56502172cbb647296c7e2697a2dc109e000fbf8830ba1b001433c7f0bbc7e062d6299ada7ab3980f662a7766829a0de31f12646d019f83cb7953a911012c41bf4ea19a1f0fae21b7da1870286ee52ea0befba7387e37341909697711f15462b20430eff7a2536c4fe4cae8166ab908e383b9297458ca4aecf3cabb4c68be441362a0a118ac8fa2c92cf684aef5f5445ab7202cfa0b818b74db90d48db3208b86d48cfc8eb9e25f559b310eaa8747dbdfb95f4f7b0291d42119414f259d9edbcef0ba2e5391b34ac716231c6c16accd76264c99cc1fafe0f84c4f297a410be4d810f81b6ebe53ddb434f59438ad755aa63325967fd89ef841d3633a845a32cbcea1ee36f7a0b653c39b0d8bd992156bdfbb93178c51df7fb42cde274ada9d2a63236b3354ef28ec70dfb6dfa91cace4acd5b5bc130a85209f0071af79b3431bd2e1fb3ce5ed0fa4fc3ccb2ab71236b30f1e9db80678d4ab76c41564e62665c92da78c34ff97c12db6ae57011387514578f06e1369e954b2a807ab8fcd49e71653e590129b9689f2fc8de8678053a4bcfbae2507e81ebdae6a694fbdb12af9bba009b8bc6b3e29145e6a7ca0fd189fce188ebfc37da6b583975d6f7054d73cf1015213a23a89bff6726a0a42d0d90dedf8c4fa7e9769a2cbc96698b2d8bdf20ce1d8c021520f4bff2f967524a841bd4687f9229deee3bfc22b9f0d889152126cf3f7b1813278663be865144c198029a6d0bbeb27498f6caa67670c8ad181a0a7742c6aaa48bf44a111af2c4945ebb74f5ae3ce0322ecd8b2ce45bb1b7878ed6af3866491b27f807868f144dfdbad6242db5d21e1cec9fc3013d90b2da57e1c86196f400073bcc00e07f4faad17c23703c93d571475a9a2c131fa6657cceb77b41b929b489e1d716418d28f02126757da356649fd242b1a556c40370968bca563fb9d4834078640757882d9782ca649aa6aabb0f12a9262321db7d18e92418b41d2596ea775d1130578523585db0dd01074ca7b880af4d49cfa4d2556bb9f2d2150a976132b271c6be8bffb47b8ce024cc40205ba2cd38ac0cab07af2d7d8dd342b14e5b147d143056d6cada80fd93df21643472c93c45c975529a449d9a86be8979ada3eb8fcda33c09a8378918e5f26cdb0c636b9f8a04ced50c8969a41d09f60430f3cc186ba8ce7b3d9f3b8fdd3939e291cd46a5167c25bdc3bd92a1e7920f4b9942982752dcfcb2164d4cfbad9fc41ac76cc62433c842ad61c4577a4ec9a273460bbf3ae9623a0f8ca1f6479d01499d15eae53234e10649a81f8c565732abc30a32fea23d01692277afe1baf6fb47289554ebcec21c7498df7cf9e926f6741f6e0a088ebc028e074c8f515e3870442406cc880ca83cb0d13e202dfc22433f614dd071e84e7d11ad2a4b5ba604c18df85a15e31e8c576c5387dac62a289a2568cbe60e855e7d92b3761781b77a6e5c2dad853680d64da52ccecf27f3cca4f4429f571b643cadf016f7c8512e79664bd921971985bb893aa595d5c26938b30ff8de2283605e7cfe3628570e84798588892d0ee207148e62bf53c7b55db5ac78b4faa5f4cd09d40377018455943b549ecdfe0dda8ef2f8526d7bc466670524e28bc46cf7ba6f44e23471f52213ef4478de5378398dc5154695c04329851d4c3aafe63111de39ba701b96a5d9627b84e77ee1271f9d653e3ef9d55106c38357913b299d90b7cea29bc443b0f81d5963894a90b565a3bbd021346cc85e08da7a296dd88fae6022eac9d8c16046a279c69aa4002013238ea441141dc1d725fc447a617b9b8e4825e3df9aea0aa42bc5cf44e177de9035a9805910cc603c996c9793f31724e347b02dd3c9842c8005f5d4f09bfb1f0668ad0b51c36b628143008e70e23b53498a4c7a15395a1062a38e05f32f5481efbc0c6b2705e656d49b57bb36d6e4428cf6376a652c99d4c4483cd611ad26c3e23a977e279ebb9f1fdc52c5ce4c71e99da8322e01fba405dc4b597100efef2f0b82bf3d1aeebeda9a3f1ce548a8d12090a53694918435fcd306be572ecc7c2dd6285b5e7834d82846c0f58ad080c0794e717962f15547214db362477258a7efc2c47f1150fd889b2a47e7fbd6cf5550f04f05f5dfaed6630ffb0a24173f57bec1e241293371f74eb79ed42589a5d7fec25024f7c7b8c3fe7cce20436d10b5676950649a7cbf16e3f3ca2239efb2ec806c4d383787a5a01dbf7509b0bc9ac0a0318b8360fe12eab129a24834353e6c6c0855e5bfb87c0fc60886058d86cbf81f71d5e2b8cd9c13213b8a3db46dbf1663064e3a9f1e9e1c670e4f0ab4e8e45c1ac36244dd9633fbc1c791ec3119b00442281ee888941e660dcd98429d9fefe38a6f59326cd497d0676e15ff696ade11738f6afebd744345cc5f13c5a46f76b6b427a4349853e54bea5988b2370c297171fae0fc5ed57ab82ebc82159358cf8e9b08416acccf6c1aad8853d844d336c59faa31086145c2f3aaae1a8b5fda2a488fddb5654c8ba0f2ffe82d4844d3fd70699cfb9db244c916d1b13223bca46accf69c288f63f09c09cac2ff25b17e96ad461e38f3005fbf6f0e014d2dab8480685223281d5a6cf46dff269aef331d952a6e0054754c39c0733053a269e3d8365e808f97fa27d4d63ee7eb04ca80ee0267866897b9c253b7a6b84c005a8296e49da799afcf93b0ebfe58017ae69ea700093f62738f18a61b5f7bc6bc65dccd14d00baad5293a4b0080e851ce27b380db422c15bbd347a52fa7320afd1bf299bf5f002f9cd526c25a9a1a68b6cefc7b53b943aa5e0f99c5ecb91032965fc3e432ed53ac925e24fc9119d80a0f47e3dfc9b92b433a706cc77471f6f9e2c4d833c266d121696f234f049c8deacb00d407ac4ad9351349f6d1c09dc505a7847610502a4791f75a15e61df15d92a6bdf43d65e41b68158b80b837be577d2447970a2685700a9d4943fde75a9a56e849047bdad058a2291dfc0842577dfa30be06737553ec51427da8bd310e2acf28c8f388b03421d0b38ec1df98d5bab50c473790a46ad1d6cd313581699b9a826e3a4a3582640af4d1e757395009becd0a2aa33967a03acae6d48e2b90cd881e0ff19a1b3a80d9609095e2b65bc6896e565bae7f78fab302f874a1e3b950e3bd47b288b2af22654f6a3bf3c4dfc1a869736bb7e0d86e7ca6ef3ca6ccc1ad81a11fc77874e9741571941af342629ee6704dace7d2c354288475a6440397dbe00cf84b2fb64435f63b1f26e36795d1fba1af706f4abe60717d69ac9cdc1daaf74db7df90a082c225278e562f8f9f4baedfa73a15c3cb00ec5cd2e15aedd2e547aa55691aced0c530a113ff8e05f19209b4e148242fc46aae0e0776a89dfa4140ab43759204e3def0e7eef4c272d402c05cf3e56d5d54a6d14960167f5ee96297b9dabec6ce3eeb8809cacd90f5f1789de8b01abfca9ed58833112c534ba64f2f58bd3e483863d6a18f40320e4f9ec1212b88f2cad079ba10705ab869b8f542b28d39d64ab1e7fe624abbbac75989719de318ca486d5056bb151efeebdfc338c222501112b7ea17d1f03507e2c12c3d743e06fc958d44f41feb9bce66f3c34befb598012dc215f069e457bd4b73aacae5de27ebe4ee154565921046e93e01af39b270abebc304020bd08d037189952edd8dad7bc4c38dd56eb786b252c1a97756bd278b1ade7cf64426cc3ea9cf5fc9de296f2e9cdc34a1e79911374e93a27e7cd4b5b54fd1799d9fc257fe48693abf46e82fba86e22f2b6fe74103dbdf6431946619e722d2426f0ee6d5e1cfb61c40dfbc0172c9ed54aef626520dcb78508bce8531b596999bf777b1510e3495a2244a6016c3b1bd8b4f27e40de9f03f5ec89149f47b7a7a059b8ac4fe1b97018daff7bfd57166ef1bb8d52f7cf13c31f424f40b1e6200cbd15b4b8dfd76373ce88105cd4df34a7a5824e2b7c5c432738eb55c832fa117cf0d1d54b0807d85c1ba4dba45104681a5bdc8f26159f8a005c48e872d90b09d94117b94cfce040ac800aa19ad1d278cc33181a8fb0d33d0333717cffc5525efad38a24703d17af5b55f90e8a46a0e5edd33a57bbacc114140aa40d6d7759ee4e1122add07c0f59fe4649e1f2c4424000e31eb1a096ef4da6514310dfec7c05a", 0x1000, 0x3}, {&(0x7f0000001740)="937a2b12113ca12fabedd32ecce0c82fcea29c63ea35251b4199b3844f0925e113bc0a5940b0ce56e45a0449057e28f9ac2ed6e3cf8ed6a8c8959c7b3615d8cf5bc5421e25842e61d9ce20d6e4eadb7e7a81642569d27d9c3fa5daa3c19ffd0de72daa920ca526de2c9ea05a8e5db950c1", 0x71, 0xa}], 0x800, &(0x7f0000001800)={[{@fat=@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@fat=@nocase}, {@fat=@showexec}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@seclabel}, {@obj_role}, {@context={'context', 0x3d, 'unconfined_u'}}]}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140), 0x6e, &(0x7f0000001540)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/116, 0x74}, {&(0x7f00000012c0)=""/105, 0x69}, {&(0x7f0000001340)=""/129, 0x81}, {&(0x7f0000001400)=""/162, 0xa2}, {&(0x7f00000014c0)=""/93, 0x5d}], 0x6, &(0x7f00000015c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x63) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:24:52 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) dup(0xffffffffffffffff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 17:24:52 executing program 7: ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{0x0, 0x10001, 0x8, 0x4, 0x100000000, 0x5, 0x84fe, 0xdcf, 0x0, 0x0, 0x8, 0x6, 0x0, 0x1, 0x2}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001240)={0x0, r0, "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", "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"}) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r1, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:25:02 executing program 6: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:25:02 executing program 7: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x6802, 0x1) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="014bae6c40626678354eb81b829632183f0f787a37a20347c754762655eaf6776c77ace7049f111510c2c3a877173101da723e4792edff4efcf5408265f3a8406c9074a44c5589c847462062a0fb793c422890229dd6b658175fe5762bf19a3f933b2a3b2c2ceef3b6e70422b67bef15c47097d3acbdbea4565dd68907da861790a5e5186477ca319a2df827915662435e0ed9d57e7fa77c0042edbefeb2c7b4c7"]) statx(r1, &(0x7f0000000040)='./file0\x00', 0x400, 0x40, &(0x7f0000000240)) 17:25:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0104cc1584ea4dc4de566f0f8f84ef4b3f330d6e0dd8f6aba5218c2999cb4be4c8c70230d44af88193ed0e2c2798f17f5895eac86da5744fa291f076061d67826b4f5afc58094b40067ab97627d51d021aa7ef9693e91a85dac93f1e79714a9e8491ad8039312b3fa5945cf36fcb0923c4d36ea8c7aee420546d02d98af4e3a51162adda4c3d69b7f071851d4d75497bbbd641dc3b93c57465daf14b5a3e4292d741db842677af561d4dcf74657a88e3ab4c017916f537726544de"], 0x5) 17:25:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x8, 0x0) r1 = dup(r0) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f00000000c0)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000040)={0x0, 0xd2e, [0xffffffffffffffff, 0x7, 0x800, 0x5be, 0x80000000, 0x67]}) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x6802, 0x1) clone3(&(0x7f0000000340)={0x20100500, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/38, 0x26, &(0x7f0000000200)=""/209, &(0x7f0000000300)=[0xffffffffffffffff], 0x1, {r3}}, 0x58) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x1f}}, './file0\x00'}) 17:25:02 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) dup(0xffffffffffffffff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 17:25:02 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 17:25:02 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x14, 0x0, 0xd00, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000c10) ioctl$LOOP_CTL_REMOVE(r0, 0x6802, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x2) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/class/ieee80211', 0xd8082, 0xc5) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) 17:25:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x900, 0x0, 0x0}) 17:25:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0104cc1584ea4dc4de566f0f8f84ef4b3f330d6e0dd8f6aba5218c2999cb4be4c8c70230d44af88193ed0e2c2798f17f5895eac86da5744fa291f076061d67826b4f5afc58094b40067ab97627d51d021aa7ef9693e91a85dac93f1e79714a9e8491ad8039312b3fa5945cf36fcb0923c4d36ea8c7aee420546d02d98af4e3a51162adda4c3d69b7f071851d4d75497bbbd641dc3b93c57465daf14b5a3e4292d741db842677af561d4dcf74657a88e3ab4c017916f537726544de"], 0x5) 17:25:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={r2}, 0xc) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0xf, 0x0, 0x4}}) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f0000000100), &(0x7f0000000140)=0x8) r4 = syz_io_uring_complete(0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r1, 0x84, 0x7}) 17:25:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0xd00, 0x0, 0x0}) 17:25:02 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) dup(0xffffffffffffffff) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) 17:25:02 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) creat(&(0x7f0000000040)='./file0\x00', 0x25) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:25:02 executing program 6: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/66, 0x42}], 0x1, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x12101) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6e, 0x1f, 0xf8, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x10429, 0x0, 0x7, 0x4, 0x7ff, 0x3, 0x2, 0x0, 0xffff, 0x0, 0x1}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) keyctl$unlink(0x9, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r3 = dup(r2) ioctl$SG_IO(r3, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:25:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0104cc1584ea4dc4de566f0f8f84ef4b3f330d6e0dd8f6aba5218c2999cb4be4c8c70230d44af88193ed0e2c2798f17f5895eac86da5744fa291f076061d67826b4f5afc58094b40067ab97627d51d021aa7ef9693e91a85dac93f1e79714a9e8491ad8039312b3fa5945cf36fcb0923c4d36ea8c7aee420546d02d98af4e3a51162adda4c3d69b7f071851d4d75497bbbd641dc3b93c57465daf14b5a3e4292d741db842677af561d4dcf74657a88e3ab4c017916f537726544de"], 0x5) 17:25:02 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 17:25:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xfc8, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0103100000000000000067"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00@\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x606, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x4d}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4011}, 0x40040) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x1d4, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x28}}}}, [@NL80211_ATTR_IE={0x21, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x88, 0xcd}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x0, 0x38, 0x1}}, @mic={0x8c, 0x10, {0x3eb, "c8a295bd0fd8", @short="a30410e55191104f"}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x62, 0xfa, "db3a55ca7bf5fab4c8c4260d416c7d9d8e36503d84c2fa2162f6c370942a7c9667d32e9de857f27148bc93d31354d9cc25de49ccc952e163da29defeb3e4c10997b5437e78712e7f1c574fb1188a7953bd80f004c37ab678d541cfb0c344"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x0, 0xf9, "3189c1b8b6349ec5e6a6eb3a497ad6bf"}, @NL80211_ATTR_FILS_ERP_REALM={0x0, 0xfa, "449982d154286e5411c223bdf7f97d9e0f3365cb1ac34cd4e303c400814a2ba4ca9d89f1ae3e97abf259a20dd64f4727ad9571b96ca03feac78ac75a2c69a61f7d2118856a8eb72345c3c028d8476a29397b23135e704938938b2e7ace7a05e7880ab82876c1b04ab6e7ad0aa78c3b190ce73ea2bf2fb48f9c1642d4621668d434"}, @NL80211_ATTR_FILS_ERP_RRK={0x0, 0xfc, "b0d150486ab732cd165c1d580374d49af4320f3929ff5a939804a96052f8db596cf639ab42a0e86322dc8ee79a9706aa5934a3dd17b2c9a201feb8257d9912069f4a959c2ac930e6cc3f660c566a152ee6db3657139d456f73ab7c0ee45e2b408ad52eefd6813de6710522aee07ca6dab69e1956718c66e401363600920be957a7feff8a83ee4f380a91995d02d40fa5600a7b99a63e79155b76d84fdd3e0afa945958828678480941d1d27ca590da0bc46ce7f0de2ea2"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x0, 0xf9, "9eba6a66a98154a187cf"}], @NL80211_ATTR_IE={0xe1, 0x2a, [@cf={0x4, 0x6, {0xfc, 0x9d, 0xe4ac, 0x6}}, @challenge={0x10, 0x1, 0x22}, @peer_mgmt={0x75, 0x6, {0x1, 0xfffe, @val=0x2, @val=0x1e, @void}}, @random={0x5a, 0xa1, "6ad78381821cded8c91c7773ef374784757ec178c6bf162d08df1b9f2ccc2dc0f4963b20cccb9749be9448d832192b7ce1f78c465b654fb50801460b7ae7e325091237730759f0e653a895cdb78bb313e7f7d0d7e649ac852e33881ed6b089f14a912cf5b60cfc9784337dac5efe61803b21c7cc805fb735a8319af52c26e7b887d4c6c0a699442c3e8ac634108edea9ff5bd3958d5760bddd315eab2a459bee63"}, @challenge={0x10, 0x1, 0x39}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x8, @device_a, 0x5, "", 0x8, 0x3, @broadcast, 0x6}}, @dsss={0x3, 0x1, 0xb9}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x804}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:25:02 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) dup(0xffffffffffffffff) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) 17:25:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, 0x0, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0xc, 0x4, 0xff, 0x3c, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x40, 0x7, 0x7}}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000340)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6, r7}) r9 = fcntl$dupfd(r8, 0x0, r8) getsockopt$inet6_udp_int(r9, 0x11, 0x0, &(0x7f0000001700), &(0x7f0000001740)=0xfffffffffffffdff) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000000)={@private1, 0x60, r7}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f00000004c0)={@ipv4={'\x00', '\xff\xff', @multicast2}, r7}, 0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/58, 0x3a}], 0x1}, 0x10000) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa0, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000893}, 0x20000040) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x230, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_EEE_MODES_OURS={0x1e8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xa9, 0x5, "0622ba42a900db87dc3c610c292dea94557b48f9925e0e7dc4d4d2aadc8d067078b96c5f7c22d6c6a1ea7e8f0f5467a8dbfd239607539c907498f92a90e809018721b412d3fcd15e80a2e137a5842754997bd808c928ca12b9a1eddf17115c47029fee7474c57c75c53ad17ecce7e553da3ae94be5077120e2d4659a810cb40c3b8ac373da914d217d5bb8b468de08712617688e838bba03d08ad365ffae662a5e6450c60c"}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "baa87c9d"}, @ETHTOOL_A_BITSET_VALUE={0xb8, 0x4, "cfa65bdbea7e2b5265cb680ae156636e34d23c4958a6e7e11251a4e92c8e04ed3a4d6f9046d7a8013aeab196a763e51f87e3001e26b6dbc79946faa05e01f79c938503e6bee6ce4037027b1a6080e0dd4193620a83266bf3d991122b905bc63705767aa776f9bf96cf3ed789629f44ff7155b221d277e068a7e604b8a09bcb304be87f76bd4aa67c09b17e35f125cca4cb950046ba6c890ef38cf9f06295b44f5d37d2359358034cce26ea6f6f2ee7797a9b3eee"}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '!).%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sg#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}, @ETHTOOL_A_EEE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x20040000}, 0x11) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000000)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:25:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0xfdfd, 0x0, 0x0}) 17:25:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x5) 17:25:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) dup(0xffffffffffffffff) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) 17:25:11 executing program 7: sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2d}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x12aa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xed37bc5c5584cc3d) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) r1 = getpgrp(0x0) wait4(r1, 0x0, 0x80000000, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x4, 0x4f, 0x80, 0x6, 0x0, 0xffffffffffffa93f, 0x9020, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x2, 0x7fffffff}, 0x5120, 0x3, 0x1, 0x8, 0x99, 0xffffffc0, 0x5, 0x0, 0x5, 0x0, 0x400}, r1, 0x9, 0xffffffffffffffff, 0x2) 17:25:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000900)={0x0, 0x0, 0x44, 0xff, @buffer={0x0, 0x25, &(0x7f0000000740)=""/37}, &(0x7f0000000780)="be7063777564721b783fca55971d77dff58c528386c118e724dd2fa5fe8f5e3a2ac9a3018d2628818f04bd130ce08ba2142661653abe1e5414a4bccbf09842ab22f5d347", &(0x7f0000000800)=""/147, 0xffffff81, 0x17, 0xffffffffffffffff, &(0x7f00000008c0)}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x60, 0x68, 0x3, "466653c726fa528e8010467411e4ff3b70c0ac3903b13d350c2d27f5f285c1ffeefa9e7e334a9ece7506cb278b150557bf13438127530db658b848818a7444738d0724fe3aa53a96f2b8ec2720633e1eb7190544efee73900abcd15815723f73"}) r1 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x9, 0x5, &(0x7f0000000380)=[{&(0x7f0000000140)="3976f29f5a0cc52824cad4842255cf66232c5564bfc0321b", 0x18, 0x10001}, {&(0x7f0000000180)="f19cbc2427672d39ca048ab8f7e24a265878b2346f8c5dcc53dfb1d7817dcc30323e47a8ef0a30100f5d07294d60374c4e569c930745925945fd64bd807597afd361493eb84f2657a9375dfa1965287f44bb736166d76cbf3eb4bdb9c8c86b9ae2c67740dcc0a2c7127342bb0573a29af91a0344c504f3df5184422d86471ce2327749", 0x83, 0x9}, {&(0x7f0000000240)="7382c943331c51258762998b4b2fbb2b7068d802dd05356cfe5250643591acdc486a73301062d65e9d78edb187f271bd23461c9a7fe38683eab7ce6e4f435ef42489d8e8b7d873d9534c2c98fcf60fb7458834d66f947a04e489837b0e4add5631c101ee44a552b056b1078b9a122708d3b047f227522e77839a6825b38db9a68f65aaede7c40ee903700c92a6e5bad0f34970c614c50c8d1fcbffc46262f32dbcf36e5e37bb4da967a708df2ce5a0593a7969c6ba9c775fc9fb8a3b50787853a7409171bf83191a938e727bf0824a8a2c7210fb3bf57496d0c790305dbe0fb9e4bdbc632db094b5353668abcf3453", 0xef, 0x4}, {&(0x7f0000001180)="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", 0x1000, 0xfff}, {&(0x7f0000000340)="f2d899a0a75731f5d53d3f3baf73ce5b405fb89be868dfb5a52b209ed579d04674cff0e6b5f9929c829d427d180a23af3689", 0x32, 0x3}], 0x0, &(0x7f0000000400)={[{@fat=@tz_utc}, {@shortname_mixed}, {@utf8no}, {@rodir}, {@shortname_lower}, {@shortname_lower}], [{@obj_type={'obj_type', 0x3d, '/dev/sg#\x00'}}, {@seclabel}, {@subj_role={'subj_role', 0x3d, '/dev/sg#\x00'}}, {@permit_directio}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fowner_gt}]}) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) pwritev2(r3, &(0x7f0000000700)=[{&(0x7f0000000500)="0f57eb3e02f29b929ab95dec9f98f663bb27a075ee12be7bdffd77145269a807694664e2a6831dcad20f621a485674f27358095da1d38f111900a9d392dc6492bf744834d1c76e6e41c5ff48181bee40ddbe44d049d25ea97f8cbfe615f7cb378e46a56578e6207f87c26c54ffddac6ffb455d070642094a97dc6bfaaaf4", 0x7e}, {&(0x7f0000000580)="5d3268427959d6a5534ff9f22a743c73de47206c84b9e8fa0c645f00703d61e1a7f7e917318ea9ec60475f18b59f8f7d2394a262bb5475f44adfd6f535d80110bf48b23572140ab1773e450995327796d4e8126767a0d3ef1bcf16228e1b9ad9ade2ed565217138d9889265a2a31838bc166f52b5356c2202ee65e", 0x7b}, {&(0x7f0000000600)="e4ee778672564a10e10b46ecf180cfca4a878e3e9281d34e27cd9dc7e4e1bfcaf7d8d18b23adc4dcfcc0039ac44196fc47424d51bf98b0940296ddc1265b51ff503243259268b1b6b918bb79033a62c1adcaa4fd51007f9a57ae0e6263c53664559e32a9de738191dc5b4bf7a13e4525cebe414e6e3c1a1d6e3ac0c5056a4067411c1fc098a278226d3b96968895c38bb121af59eb751007fff84ab17906abcb1df8a62ae1cb6931b16087132f24e7c2df724572f970282635f42ba1790e02f843a1", 0xc2}], 0x3, 0x60000000, 0x3, 0x7) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:25:11 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}) 17:25:11 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000009, 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x6802, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:25:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x80000, 0x0, 0x0}) 17:25:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x5) 17:25:11 executing program 6: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$addseals(r0, 0x409, 0x6) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = add_key$fscrypt_v1(&(0x7f00000017c0), &(0x7f0000001800)={'fscrypt:', @desc2}, &(0x7f0000001840)={0x0, "55fb0ae494f290d5a49b39336fa12870a88bf116c5680574f8abdada4409ba83f70dcd596a21c3a3b130584c4863cbdbe5bace54fd44db69754366acbe478202"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, &(0x7f0000000000)=@secondary) keyctl$link(0x8, 0x0, r2) r3 = dup(r1) r4 = dup(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r4, 0x0) signalfd4(r4, &(0x7f0000000080)={[0x8]}, 0x8, 0x0) r5 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000003ac0)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x14, 0x0, r7) syz_io_uring_submit(r6, 0x0, &(0x7f0000000540)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000340)='./file1\x00', 0x4, 0x6000, 0x0, {0x0, r7}}, 0xa50) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r7}}, 0x20200) ioctl$SG_IO(r3, 0x2203, &(0x7f00000000c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f0000001700)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2199.046417] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2199.072753] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 17:25:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 17:25:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x1000000, 0x0, 0x0}) 17:25:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x5) 17:25:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) recvmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/141, 0x8d}], 0x2, &(0x7f0000001140)=""/4096, 0x1000}, 0x7ff}, {{&(0x7f0000002140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000003200)=[{&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)}], 0x2, &(0x7f0000003240)=""/249, 0xf9}, 0xfffffff9}, {{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000003340)=""/140, 0x8c}, {&(0x7f0000003400)=""/150, 0x96}, {&(0x7f00000034c0)=""/130, 0x82}, {&(0x7f0000003580)=""/161, 0xa1}, {&(0x7f0000003640)=""/155, 0x9b}, {&(0x7f0000003700)=""/34, 0x22}], 0x6, &(0x7f00000037c0)=""/249, 0xf9}, 0x1}], 0x3, 0x2, &(0x7f0000003980)={0x0, 0x3938700}) 17:25:11 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}) 17:25:11 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f0000000040)='./file0\x00', 0x400, 0x10, &(0x7f0000000340)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x216200, 0x0) faccessat(r1, &(0x7f0000000140)='./file0\x00', 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x2) 17:25:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_open_dev$vcsn(&(0x7f0000000340), 0xfffffffffffffffc, 0x24000) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x18}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2f}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x25}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x33}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3190}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x801) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0xfc8, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0103100000000000000067"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x7e}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "76ffc1716e6462baafb3496083"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "9b3395321d"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "793fc579175295de533cb2892f8d2d"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "309f54f49909cbaa7f260e7b2c"}]}, 0x94}, 0x1, 0x0, 0x0, 0x8845}, 0x40) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) read$snapshot(r3, &(0x7f0000000040)=""/50, 0x32) r4 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r5 = dup(r4) ioctl$SG_IO(r5, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2199.271840] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2199.310659] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 17:25:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x8, 0x4) 17:25:22 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x6802, 0x1) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000000000)={0x3, 0x100, 0x8001}) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x2886}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:25:22 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x3ff, 0x4}) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:25:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x2000000, 0x0, 0x0}) 17:25:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[], 0x5) 17:25:22 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x6802, 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 17:25:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x80000, 0x0}) 17:25:22 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff}) 17:25:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_rssi={{0x1405, 0x2}, {0xc8}}}, 0x6) 17:25:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[], 0x5) 17:25:22 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}) 17:25:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x3000000, 0x0, 0x0}) 17:25:32 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff}) 17:25:32 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[], 0x5) 17:25:32 executing program 4: prctl$PR_GET_CHILD_SUBREAPER(0x25) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000040)="a55edc28b7faad11dda93892a1d49bd2e4966c1777d5968ab3083074ca6b188e2b5058f258b146d0390702f7a04fe0a8075e260d69f47bf3c90ff9298d8ebd60") write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000079d92313000001"], 0x9) ioctl(r0, 0x3, &(0x7f0000001300)="9a8732fd45d034909fd1599f241539664d1a6f504b32b1a7c7649938c61f01822b83e8b213c7a06105a50b959a6e2a5833f5ad5e3ba22b3350cb2c766a9deb448d634b8712b4b74fc64a7baee4d0ba695ff35f6c35746ceb6fa65bdbbb806e81f94a1cb1cc04b0731f5bf89616cf1ce55a9127888a50ddfe01437e28d9ae1a3a406f0e26219c205c9aa5bcc38cd2e02f19c1f9bcf5ec2f8dd17dacaac962a1a2af03b7688b37a6fe3a696177b6910a3a5601a325e85b2ee14118cc01da425b56a9a379c358db03c6737dae1aef71cbe535fddec7b31497c958924e35f9c488ee7a") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) clock_gettime(0x0, &(0x7f0000001280)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/177, 0xb1}], 0x1, &(0x7f0000002440)=""/4099, 0x1003}}], 0x1, 0x2000, &(0x7f0000001400)={r1, r2+10000000}) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000012c0)={0x2f, 0xf7e, 0x0, 0x1, 0x81, 0x9, 0x1000}, 0xc) 17:25:32 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x6000000, 0x0, 0x0}) 17:25:32 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="007295886d820331f8f5f461cd8a563ccbebf649808285e624b2f06aa254318ba12d4595224d5c68a8d6e08b7e8e900348074c6fe0148ae43161573f0dac51752522342335ea70e9102d3dece33d7cc34186d6515d502faacdfb261e8d1d11"]) statx(r0, &(0x7f00000013c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) rename(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)='./file0\x00') removexattr(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)=@known='trusted.overlay.metacopy\x00') setresuid(0x0, r1, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000240)="bca729b76233d277f800c13d142c625e414a4da332d810bf0d07a0e362a1e088b9aba9c1bde70d40f3b642c1d2dc2c41c0ae88002ede33c1a39761f44d2231effbd8627f92b72be90f59696b101f64253f676869b5835068604ba9566cc262c88fa45af1ee19015d4e2d64071527b8513e3bfdbec131cdfb488c9d8d7fa9af24ec34662f1d58", 0x86, 0x2}, {&(0x7f0000000300)="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", 0x1000, 0x3f}], 0x400, &(0x7f0000001300)={[{@overriderock}, {@utf8}, {@hide}, {@map_off}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@audit}, {@euid_gt={'euid>', r1}}]}) 17:25:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000140)={0x0, 0x6, 0x3, 0x1}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x220000, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0x1, [0x5, 0x9, 0x7, 0x9, 0x7]}) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x6802, 0x1) lseek(r0, 0x1ff, 0x0) write$P9_RLCREATE(r4, &(0x7f0000000540)={0x18, 0xf, 0x2, {{0x0, 0x3, 0x3}, 0xfff}}, 0x18) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000001180)={{}, 0x0, 0x2, @inherit={0x48, &(0x7f00000000c0)={0x1, 0x0, 0x4, 0x8, {0xa, 0x58, 0x43, 0x908, 0xff}}}, @devid=r3}) 17:25:32 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 17:25:32 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x6802, 0x1) openat$cgroup_pressure(r0, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000021c0), 0x0, 0x0) syz_io_uring_setup(0x37a5, &(0x7f00000025c0)={0x0, 0x6de4, 0x4, 0x0, 0x275, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000002640), &(0x7f0000002680)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000026c0)=@IORING_OP_ASYNC_CANCEL, 0x3f) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000580)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r3, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=@nfc_llcp={0x27, 0x1, 0x0, 0x6, 0x8, 0x1, "9411beefbe8c009ca342b8f3a55133b7cbcf945b2353212567020227b1ec1c737ee13170b6ab45c33b97d0027f14d3dc87f19f4ccab394ed3f699c09958928", 0x9}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000000c0)="13a800b3b4a6fe25c06529beac2d4c8183822857ea733e274c1498fa05577828de4d197df085cc68ae6304454fe91a184b9e86d675ae96c730eb3791afcaaeade13a577e86a06a50a203473f4deb822eaddacb24f0e6115bae1e03590d13d13a819829df46def9a96e16730b050be09e0b655518bcce88aaceec80c695c11d56cc4c75a7e5fae4253767ad28598df707b6097b7e2d178e9ae9604f0d816c5e06284dfcb9", 0xa4}, {&(0x7f0000000180)="006946fbed5c6b425f83f1a749d82816ac7260ec5d6e14e2b20a11306eb73fdaf196d5ba7fb9a90e", 0x28}, {&(0x7f00000001c0)="d21c03f4ff3370eb6b3ce0ff18d94a31fbe319e769548a5e1242696e59d0ecc43cf2501054c90bd813305db3fbd4f124c2d3ae7fd71b58ca09fa6fd362906470b77033504f6f24e587856000a930039efaff4a84ed439fb6c411e37b81802c2705dabc36bb58fe3559827f9b8bc20a0bd6fd0b785df4c5abdf6b99f1f9629a89aa34e80cf56d1a878866eb17f12fd777e4abf7cce428245ceccfeefefd464eddfe5f9f", 0xa3}, {&(0x7f0000000280)="62b4da86d9fc1a70033a08eb6132a583fe6f9cf1ec6ecfdbf15facd828c72174be3e1e3af68b420c1a2427a8182bcb4537123a5d8236678f1544723f423d5c6d224603b4c12abb95361fbcf6b356471bb1c82873508cbb4b112a624bc6d0e7ab152beb9cdfa6d7eddc27875f4cde453eedf430e50f3fe92fee582d35f3b006b93dc6889e12c4b86e834a426bfd686a69167cbdd3b960c2a6b624694068c03dc7dae4caa59eb28c5536b6a46f3c02e4aa93", 0xb1}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f00000003c0)="b3d946ec3979e69f72189417495fa2daabd79100d31eb47ce29323799fb343d4133ed61b6946bfc65f73b47e44e40d9056cdd443c700e4bea7f9cf5de5ba16b03f57e0b58008f2f838c71257474c16dce074e6ac6d5424c3e317d0dd865c92ed36662cc0d114fc410457a8e417e54a95ffebe87467bad8f8f476b0f1401e2b42d544ff8523898e0f4775bc5666e418d4bb29130e4426688ffd313897e362843204b1b4a14ff37ec76ee9f9114f7f31bb09fbae40bc616a41fd20bf5e6197976c84d7", 0xc2}], 0x6}, 0x0, 0x4800, 0x1, {0x0, r4}}, 0xff) r5 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x245afbbed5d4531b) r6 = dup(r5) ioctl$SG_IO(r6, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:25:32 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x5) 17:25:32 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 17:25:32 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x9000000, 0x0, 0x0}) 17:25:32 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000001c0)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 17:25:32 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[@ANYBLOB='\b']) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000240)={0x0, 0xfb, 0xdd, 0x1, 0x3, "95c47695b33185262c177519cdfc00c5", "3ee28d7d01128b86fa2ee12ce7ce7ef498223baa8df81c611b3aa1c7b8cba224ae5cdbb1beb037674634e91df12d584a73f500a2c0a9454c081d1031fa2d820be0538f2c4baf6adc9e38dbad20c20c282956fcc3de9f0cf646ba9cefca9a1f5b78e415afb797c2a377bb2f7a1341e2d79aff882fd407ac15fad10adb32580b1a93b64ef0b01b8672763b0ba3a3d33b4da99247cff479ece782148b262b5a6dea217482c9cfd3e7f298f71d0c8bc750768aeced66ba800d4e9c406cc91f4691811b681f19eb9fccad"}, 0xdd, 0x3) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:25:32 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x5) 17:25:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x89901) dup3(r2, 0xffffffffffffffff, 0x80000) 17:25:32 executing program 4: accept4(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x80, 0x800) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:25:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000001040)="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") r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) 17:25:41 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d326eceb0e3285075e649e69bd"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d2733d0219"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x6802, 0x1) r3 = pidfd_getfd(r2, r0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'sit0\x00'}) statx(r1, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) 17:25:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x13, 0x8000) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:25:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x5) 17:25:41 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}) 17:25:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 17:25:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0xd000000, 0x0, 0x0}) 17:25:41 executing program 6: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x2000006, 0x13, 0xffffffffffffffff, 0x10000000) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000001c0)) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f00000001c0)) syz_io_uring_submit(0x0, r1, &(0x7f0000000440)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x101, 0x7, 0x0, {0x0, 0x0, r3}}, 0xfffffffa) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x2, @bearer=@l2={'eth', 0x3a, 'geneve1\x00'}}}}, ["", "", "", ""]}, 0x30}}, 0x8890) r6 = dup(r4) ioctl$SG_IO(r6, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)={0x2, 0x0, @b}, 0x48, r7) r8 = dup(r4) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) 17:25:41 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00269438da431751129b5f3b695464822db533eee3db0f5c16bc7d17046b6b564e83baef69d0a499c749e219c53216dbbd877847e892ba64662893023c24484bc4249fc338fecfbd4310569b14"]) statx(r0, &(0x7f0000000040)='./file0\x00', 0x4000, 0x400, &(0x7f0000002640)) 17:25:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 17:25:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x10000000, 0x0, 0x0}) 17:25:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0104cc1584ea4dc4de566f0f8f84ef4b3f330d6e0dd8f6aba5218c2999cb4be4c8c70230d44af88193ed0e2c2798f17f5895eac86da5744fa291f076061d67826b4f5afc58094b40067ab97627d51d021aa7ef9693e91a85dac93f1e7971"], 0x5) 17:25:41 executing program 7: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000001c0)) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f00000013c0)) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x0]) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x40841, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x400000, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udplite\x00') mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x80400, &(0x7f0000000300)={[{@memory_recursiveprot}, {}, {@memory_recursiveprot}, {}, {@memory_localevents}, {}, {}], [{@subj_user={'subj_user', 0x3d, ',#:!@'}}, {@obj_type={'obj_type', 0x3d, '.\'.'}}, {@obj_type={'obj_type', 0x3d, '\\^$'}}]}) write$P9_RREADLINK(r2, &(0x7f0000000180)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) getdents(r1, &(0x7f00000003c0)=""/4096, 0x1000) 17:25:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_opts(r1, 0x29, 0x10, 0x0, &(0x7f00000000c0)) r2 = dup(r0) r3 = signalfd(r1, &(0x7f0000000040)={[0x5]}, 0x8) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000100)=0x7, 0x4) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000000)) 17:25:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 17:25:41 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 17:25:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="01"], 0x5) 17:25:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 17:25:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0xf5ffffff, 0x0, 0x0}) 17:25:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x3, 0xaac725b5e5444c80}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) [ 2231.090964] Bluetooth: hci3: command 0x0406 tx timeout [ 2233.138933] Bluetooth: hci3: command 0x0406 tx timeout 17:25:50 executing program 6: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x0, 0x0, @c}, 0x29, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = add_key$fscrypt_v1(&(0x7f00000017c0), &(0x7f0000001800)={'fscrypt:', @desc2}, &(0x7f0000001840)={0x0, "55fb0ae494f290d5a49b39336fa12870a88bf116c5680574f8abdada4409ba83f70dcd596a21c3a3b130584c4863cbdbe5bace54fd44db69754366acbe478202"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, &(0x7f0000000000)=@secondary) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='\x00', r2) 17:25:50 executing program 4: r0 = geteuid() recvmsg$unix(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000000c0), 0x6e, &(0x7f0000001400)=[{&(0x7f0000000140)=""/96, 0x60}, {&(0x7f00000001c0)=""/190, 0xbe}, {&(0x7f0000000280)=""/121, 0x79}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/220, 0xdc}], 0x5, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ca2d89ad5dfbf448569b5a103314e989ffd4c3e00972a4404ce3b6b649283ba334d3734c0564f929b811c32e612db29456aa1b360c6de825a8798979321221c434d78471692178afc1f62faa2a823532c591a7f59de199de507358baaba32bf8febfefbd720c14504bfda8a56a0bee6fc9d082b8a778605d6bbd51c33dc0cae8c4a3c8511b02988e4a01f1e9c9d71a6ad57472ea57ac9a81777a940ce933b6a39f0e870a57d8d505b4a7"], 0x100}, 0x2) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r3, 0x0) r4 = fsmount(r2, 0x1, 0xa) ioctl$SG_IO(r4, 0x2285, &(0x7f0000001940)={0x0, 0xfffffffffffffffb, 0x9c, 0xc3, @buffer={0x0, 0xd6, &(0x7f0000001640)=""/214}, &(0x7f0000001740)="e8a855baa2650e5bd6627ff3c0463564be86f223ca4f0a34ea9e28adf21d53e21da741834009b39c9e634195b78a9c8a39a026f3a406e5c6fe784311be9cd222d2d6611c5d452c29a3a2392c397a722e729b95491e13bca683e983220ead0a18da875cc795ee14ada4d4ad50cb70619b1a9b2b42f1153649d6879fb9a3bcbe33e89ff0ed552878c645f607162b1bfc8455571707d386ae6ac556af61", &(0x7f0000001800)=""/209, 0x8, 0x34, 0x0, &(0x7f0000001900)}) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000015c0)={{}, {0x1, 0x5}, [{0x2, 0x6, 0xee01}, {0x2, 0x4, r0}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x1}, {0x2, 0x1, r1}, {0x2, 0x3, r3}], {0x4, 0x2}, [{}], {0x10, 0x5}, {0x20, 0x4}}, 0x64, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffd}, 0x6) 17:25:50 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 17:25:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x6, 0x6ca1e0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) 17:25:50 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff0f}) 17:25:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0xf6ffffff, 0x0, 0x0}) 17:25:50 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="01"], 0x5) 17:25:50 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000002640)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x50001, 0x8, 0xc}, 0x18) 17:25:50 executing program 6: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x200000, 0x4c) read(r0, &(0x7f0000001180)=""/4096, 0x1000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x40040}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000800)=[&(0x7f00000001c0)={0x0, 0x0, 0x41, 0x0, 0x0, r2, 0x0}]) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x1c2) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x6802, 0x1) io_cancel(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x3ff, r4, &(0x7f0000002180)="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", 0x1000, 0xd6f8, 0x0, 0x5, r5}, &(0x7f00000000c0)) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r6 = dup(0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_IO(r6, 0x2203, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f00000001c0)) dup2(r7, r1) 17:25:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="ddbbf26902167f008f1e987463bf4cd182"], 0x1000, 0x0, &(0x7f0000001180)="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"}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0xc8, 0x7, 0x0, "8b945255a89937024258ca1a432eeb23d19ffc3bcfcba7ce6402ae4cdc9b17def960709ad3aaa2c630c1e46d70cdddb3c15c246e37c55453d799f7cd542d5b85c9fc7027a319790f17fb0d9899de264c171705c50e75f656846c9c66f1537d08a6aad230d73d3113ee9625da0234c62a0738a700293a81ee3ffa0a63b8596fdaf7e7bd8a6c2086b699646577b76d503bdefb857a16e55d366c324d6e26c28777f5a20b0ab29681407960cff1d1ffd147ce0340f12a146f5b45584c6817dcc01b22707e6ae0ecefa4"}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xca00, 0x80) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x200000) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa, 0x1010, r2, 0x0) 17:25:51 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 17:25:51 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f80100200040000000000000000000800029d0e911f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe5468697320", 0x60}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530", 0x45, 0x600}], 0x0, &(0x7f0000010d00)) r1 = fsmount(0xffffffffffffffff, 0x0, 0xd) mount$bind(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) faccessat(r1, &(0x7f0000000040)='./file0\x00', 0x8) statx(r0, &(0x7f00000000c0)='./file1\x00', 0x1000, 0x4, &(0x7f0000002640)) 17:25:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="01"], 0x5) 17:25:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x5, 0x400) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000080)="f085ca33b424050076d820bf2b6ff3c4f625f614ca87bdac760d2e0873a3ded6748eed299ab6a4c99fbaa2da5f546c24401c3a8b33f6972b4c04259e") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3, 0xfffffffffffffffd}, 0x6) 17:25:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xfdfd, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0xfcffffff, 0x0, 0x0}) [ 2238.352052] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 17:25:51 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) creat(0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="a3c16d1b381e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}) [ 2238.389152] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2240.242975] Bluetooth: hci3: command 0x0406 tx timeout [ 2242.105499] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 2247.420831] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 2251.983082] kmemleak: 8 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88800e621d00 (size 184): comm "syz-executor.1", pid 281, jiffies 4296895740 hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 88ab951a): kmem_cache_alloc_noprof+0x42f/0x690 prepare_creds+0x2c/0x7e0 copy_creds+0x7a/0xa20 copy_process+0xf59/0x7410 kernel_clone+0xea/0x7f0 __do_sys_clone+0xce/0x120 do_syscall_64+0xbf/0x390 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff88801f5de700 (size 128): comm "syz-executor.1", pid 281, jiffies 4296895740 hex dump (first 32 bytes): 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 ................ backtrace (crc 10116262): __kmalloc_noprof+0x48a/0x770 security_prepare_creds+0x101/0x160 prepare_creds+0x579/0x7e0 copy_creds+0x7a/0xa20 copy_process+0xf59/0x7410 kernel_clone+0xea/0x7f0 __do_sys_clone+0xce/0x120 do_syscall_64+0xbf/0x390 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff888013e81200 (size 288): comm "syz-executor.1", pid 281, jiffies 4296895762 hex dump (first 32 bytes): 01 00 00 00 01 00 00 00 00 00 00 00 ad 4e ad de .............N.. ff ff ff ff ac 55 00 00 ff ff ff ff ff ff ff ff .....U.......... backtrace (crc 31db939f): kmem_cache_alloc_noprof+0x42f/0x690 alloc_pid+0xd5/0x1100 copy_process+0x3bd1/0x7410 kernel_clone+0xea/0x7f0 __do_sys_clone+0xce/0x120 do_syscall_64+0xbf/0x390 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff88804863c000 (size 2048): comm "syz-executor.1", pid 14531, jiffies 4296895772 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1f 00 03 40 00 00 00 00 00 00 00 00 00 00 00 00 ...@............ backtrace (crc 3dcec8e0): __kmalloc_noprof+0x48a/0x770 sk_prot_alloc+0x157/0x280 sk_alloc+0x34/0xbd0 bt_sock_alloc+0x3a/0x3b0 hci_sock_create+0xb2/0x170 bt_sock_create+0x15d/0x2c0 __sock_create+0x369/0x810 __sys_socket+0x145/0x260 __x64_sys_socket+0x73/0xb0 do_syscall_64+0xbf/0x390 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff88800cfc2140 (size 32): comm "syz-executor.1", pid 14531, jiffies 4296895772 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01 00 00 00 03 00 00 00 4b 00 00 00 00 00 00 00 ........K....... backtrace (crc ad019dda): __kmalloc_noprof+0x48a/0x770 security_sk_alloc+0x101/0x160 sk_prot_alloc+0x20b/0x280 sk_alloc+0x34/0xbd0 bt_sock_alloc+0x3a/0x3b0 hci_sock_create+0xb2/0x170 bt_sock_create+0x15d/0x2c0 __sock_create+0x369/0x810 __sys_socket+0x145/0x260 __x64_sys_socket+0x73/0xb0 do_syscall_64+0xbf/0x390 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff8880475f7000 (size 232): comm "syz-executor.1", pid 14531, jiffies 4296895775 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 c0 63 48 80 88 ff ff ..........cH.... backtrace (crc 1279ec43): kmem_cache_alloc_node_noprof+0x40a/0x6b0 __alloc_skb+0x2ab/0x370 alloc_skb_with_frags+0x8f/0x7c0 sock_alloc_send_pskb+0x7cb/0x950 hci_sock_sendmsg+0x190/0x2270 sock_write_iter+0x57e/0x610 vfs_write+0xbe9/0x1150 ksys_write+0x1ef/0x240 do_syscall_64+0xbf/0x390 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: leak checking failed VM DIAGNOSIS: 17:26:05 Registers: info registers vcpu 0 RAX=0000000000920a0d RBX=0000000000000000 RCX=ffffffff84c02257 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c96a0 RBP=dffffc0000000000 RSP=ffffffff85c07e00 R8 =0000000000000001 R9 =ffffed100d9c630a R10=ffff88806ce31853 R11=0000000000000001 R12=ffffffff86645f50 R13=1ffffffff0b80fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84c00f4e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e53ba000 00000000 00000000 LDT=0000 fffffe5000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffec2d1e700 CR3=000000001f72f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000bfe62e42fefa39ef XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000b498ff RBX=0000000000000001 RCX=ffffffff84c02257 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c96a0 RBP=dffffc0000000000 RSP=ffff8880096efe58 R8 =0000000000000001 R9 =ffffed100d9e630a R10=ffff88806cf31853 R11=0000000000000001 R12=ffffffff86645f50 R13=1ffff110012ddfd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84c00f4e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e54ba000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbbfc942310 CR3=000000001f70c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=85cc2003d6a4a2abadb8ef0dd0999710 XMM02=e1c2dc3283c64131fe6c70f0e191c2f2 XMM03=791e7f509114855f83c9170d4a9bf12e XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=0e0d0c0f0a09080b0605040702010003 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000